Техническая информация
- '%TEMP%\run.exe' /inst sys
- '%WINDIR%\system\Oem7F7.exe' /a /acer /random /protect
- '%WINDIR%\system\OEM.exe'
- %TEMP%\run.exe
- %TEMP%\tmp.dll
- %TEMP%\~1.cmd
- %WINDIR%\system\OEM.exe
- %WINDIR%\system\Oem7F7.exe
- %TEMP%\~1.cmd
- %TEMP%\tmp.dll
- %TEMP%\run.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'