Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\MicrosoftProtection.exe
- '%TEMP%\MrDD4.tmp\Browser.exe' /NOCONSOLE AnotherPerson.bat
- '%TEMP%\MrDD4.tmp\Browser.exe' /NOCONSOLE svccost.exe
- '%HOMEPATH%\Start Menu\Programs\Startup\MicrosoftProtection.exe'
- '<SYSTEM32>\cmd.exe' /c AnotherPerson.bat
- %TEMP%\MrDD4.tmp\svccost.exe
- %TEMP%\MrDD4.tmp\Browser.exe
- %TEMP%\MrDD4.tmp\AnotherPerson.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''