Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Screen' = '%WINDIR%\Repack\Screener.vbs'
- %WINDIR%\Tasks\Clearing.job
- '%WINDIR%\Repack\pht.exe'
- '<SYSTEM32>\schtasks.exe' /create /tn "Clearing" /tr "%WINDIR%\Repack\clearing.bat" /sc daily /st "18:00:00" /ru "SYSTEM" /rp
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Repack\Screener.vbs"
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\Repack\setuper.bat" "
- '<SYSTEM32>\reg.exe' add "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v Screen /t REG_SZ /d "%WINDIR%\Repack\Screener.vbs" /f
- %WINDIR%\Repack\setuper.bat
- %WINDIR%\Repack\settings.ini
- %WINDIR%\Repack\Screener.vbs
- %WINDIR%\Repack\scr\17.29.59.jpg
- %WINDIR%\Repack\hslog.log
- %WINDIR%\Repack\twaie_32.dll
- %WINDIR%\Repack\pht.exe
- %WINDIR%\Repack\7z.dll
- %WINDIR%\Repack\7z.bat
- %TEMP%\nsf2.tmp\System.dll
- %WINDIR%\Repack\Mget.vbs
- %WINDIR%\Repack\clearing.bat
- %WINDIR%\Repack\7z.exe
- %TEMP%\nsf2.tmp\System.dll