Техническая информация
- скрытых файлов
- расширений файлов
- %WINDIR%\Service\task\host\vSendEx.exe
- %TEMP%\ckz_H25U\suggestions for launching.doc.exe
- <SYSTEM32>\cmd.exe /c ""%WINDIR%\Service\task\host\786.bat" "
- <SYSTEM32>\wscript.exe "%WINDIR%\Service\task\host\lucky.vbs"
- %WINDIR%\Service\task\host\786.bat
- %WINDIR%\Service\task\host\lucky.vbs
- %WINDIR%\Service\task\host\vSendEx.exe
- %TEMP%\ckz_H25U\suggestions for launching.doc.exe
- %WINDIR%\Service\task\host\suggestions for launching.doc
- %TEMP%\ckz_H25U\suggestions for launching.doc.exe
- ClassName: 'WordPadClass' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''