Техническая информация
- <SYSTEM32>\at.exe 21:22 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\pdwa.exe""
- <SYSTEM32>\at.exe 22:26 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\dtmn.exe""
- <SYSTEM32>\at.exe 21:18 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\wtsx.exe""
- <SYSTEM32>\at.exe 21:09 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\uhcd.exe""
- <SYSTEM32>\at.exe 21:14 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\kdhr.exe""
- %TEMP%\nsi3.tmp\ns5.tmp
- %TEMP%\nsi3.tmp\ns4.tmp
- %TEMP%\nsi3.tmp\nsExec.dll
- %TEMP%\nsi3.tmp\ns8.tmp
- %TEMP%\nsi3.tmp\ns7.tmp
- %TEMP%\nsi3.tmp\ns6.tmp
- %WINDIR%\kdhr.exe
- %WINDIR%\uhcd.exe
- %TEMP%\nsb2.tmp
- %WINDIR%\dtmn.exe
- %WINDIR%\pdwa.exe
- %WINDIR%\wtsx.exe
- %WINDIR%\pdwa.exe
- %WINDIR%\dtmn.exe
- %WINDIR%\wtsx.exe
- %WINDIR%\uhcd.exe
- %WINDIR%\kdhr.exe
- %TEMP%\nsi3.tmp\ns7.tmp
- %TEMP%\nsi3.tmp\ns8.tmp
- %TEMP%\nsi3.tmp\nsExec.dll
- %TEMP%\nsi3.tmp\ns4.tmp
- %TEMP%\nsi3.tmp\ns5.tmp
- %TEMP%\nsi3.tmp\ns6.tmp
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '#32770' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''