Техническая информация
- '%TEMP%\新建文件夹\server.exe'
- '<SYSTEM32>\wscript.exe' "C:\2092.vbs"
- '<SYSTEM32>\ntvdm.exe' -f -i1
- C:\2092.vbs
- %WINDIR%\Temp\scs3.tmp
- %WINDIR%\Temp\scs4.tmp
- %WINDIR%\Avist.exe
- %TEMP%\aut1.tmp
- %TEMP%\新建文件夹\server.exe
- %TEMP%\aut2.tmp
- %WINDIR%\Temp\scs4.tmp
- %TEMP%\新建文件夹\server.exe
- C:\2092.vbs
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %WINDIR%\Temp\scs3.tmp
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-b88.b8c.3a0002'