Техническая информация
- <SYSTEM32>\wscript.exe "%PROGRAM_FILES%\what_you_say\be_youself\tooo_my_blooood.vbs"
- <SYSTEM32>\wscript.exe "%PROGRAM_FILES%\what_you_say\be_youself\come.vbs"
- <SYSTEM32>\cmd.exe /c ""%PROGRAM_FILES%\what_you_say\be_youself\zapuskalka.bat" "
- %PROGRAM_FILES%\what_you_say\be_youself\tooo_my_blooood.vbs
- %PROGRAM_FILES%\what_you_say\be_youself\alone_ndklokajos.olpo
- %PROGRAM_FILES%\what_you_say\be_youself\come.vbs
- %PROGRAM_FILES%\what_you_say\be_youself\Uninstall.ini
- %PROGRAM_FILES%\what_you_say\be_youself\Uninstall.exe
- %PROGRAM_FILES%\what_you_say\be_youself\come_to_my_window.aga
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %PROGRAM_FILES%\what_you_say\be_youself\seduksenchuk.ico
- %PROGRAM_FILES%\what_you_say\be_youself\zapuskalka.bat
- %PROGRAM_FILES%\what_you_say\be_youself\eto_trava_detka.ggg
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- '64.##.191.222':4321
- 'localhost':1036
- ClassName: 'Shell_TrayWnd' WindowName: ''