Technical Information
- '<SYSTEM32>\taskkill.exe' /f /im rfusclient.exe
- '<SYSTEM32>\taskkill.exe' /f /im rutserv.exe
- C:\WIN\System\start.bat
- C:\WIN\System\regedit.reg
- C:\WIN\System\vp8decoder.dll
- C:\del.cmd
- C:\WIN\System\start.vbs
- C:\WIN\System\start.exe
- C:\vcheat.exe
- C:\vcheat.sfx.exe
- C:\1.bat
- C:\WIN\System\vp8encoder.dll
- C:\WIN\System\rfusclient.exe
- C:\WIN\System\rutserv.exe
- C:\vcheat.exe
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- 'C:\WIN\System\start.exe'
- '<SYSTEM32>\wscript.exe' "C:\WIN\System\start.vbs"
- 'C:\vcheat.sfx.exe' -p123 -dc:\
- 'C:\vcheat.exe'
- '<SYSTEM32>\cmd.exe' /c del.cmd
- '<SYSTEM32>\cmd.exe' /c ""C:\WIN\System\start.bat" "
- '<SYSTEM32>\cmd.exe' /c ""c:\1.bat" "