Техническая информация
- '%TEMP%\NTPWEDIT\PasswordChanger.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\NTPWEDIT\start.cmd" "
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: '(null)'
- ClassName: 'RegMonClass' WindowName: '(null)'
- ClassName: 'FileMonClass' WindowName: '(null)'
- %TEMP%\NTPWEDIT\PasswordChanger.exe
- %TEMP%\NTPWEDIT\SETTINGS.INI
- %TEMP%\NTPWEDIT\start.cmd
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'ThunderRT6FormDC' WindowName: '(null)'
- ClassName: 'ThunderRT6FormDC' WindowName: 'Shareware Cheater v 3.0'