Техническая информация
- <SYSTEM32>\wscript.exe "%WINDIR%\temp\850872.vbs" 程序运行参数
- %HOMEPATH%\Favorites\ЧїФЅСЗВнС·НшЙП№єОпНјКйЈ¬КЦ»ъЈ¬КэВлЈ¬јТµзЈ¬»ЇЧ±Ж·Ј¬ЦУ±нЈ¬КЧКОµИФЪПЯПъКЫ.url
- %HOMEPATH%\Favorites\µ±µ±№єОп ФЪПЯПъКЫДРЧ° Е®Ч° НЇЧ° Р¬ ЕдКО јТѕУ.url
- %HOMEPATH%\Favorites\МФ±¦Нш-НшЙП№єОпµЪТ»СЎФс.url
- %HOMEPATH%\Favorites\№ИёиЛСЛч.url
- %HOMEPATH%\Favorites\4399ФЪПЯНжУОП·.url
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Жф¶Ї Internet Explorer дЇААЖч.lnk
- %HOMEPATH%\Favorites\xpПµНіЕМПВФШ.url
- %HOMEPATH%\Favorites\ТЧИ¤№єОпНш.url
- %HOMEPATH%\Favorites\їбїб2НшЦ·µјєЅ.url
- %HOMEPATH%\Favorites\ВМЙ«Гв·СµзУ°Нш.url
- %TEMP%\aut1.tmp
- %WINDIR%\Temp\850872.vbs
- %HOMEPATH%\Favorites\УОП·ПВФШ.url
- %HOMEPATH%\Favorites\°Щ¶ИЛСЛч.url
- %HOMEPATH%\Favorites\ѕНИҐИнјюПВФШ.url
- %HOMEPATH%\Favorites\ФЪПЯГв·СТфАЦ!.url
- %WINDIR%\Temp\850872.vbs
- %TEMP%\aut1.tmp
- ClassName: '' WindowName: '%HOMEPATH%\Desktop'