Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Adobe Acrobat' = ''
- C:\drivers\office\winux\temp.exe
- C:\drivers\office\winux\msoffice.exe
- <SYSTEM32>\attrib.exe C:\drivers\office +h +s
- <SYSTEM32>\rundll32.exe <SYSTEM32>\shell32.dll,OpenAs_RunDLL C:\drivers\office\winux\Blue_Book_2011-12.pdf
- <SYSTEM32>\attrib.exe C:\drivers +h +s
- <SYSTEM32>\wscript.exe "C:\drivers\office\winux\run.vbs"
- <SYSTEM32>\cmd.exe /c ""C:\drivers\office\winux\run.bat" "
- C:\drivers\office\winux\svchost.exe
- C:\drivers\office\winux\run.vbs
- C:\drivers\office\winux\Blue_Book_2011-12.pdf
- C:\drivers\office\winux\temp.exe
- C:\drivers\office\winux\msoffice.exe
- C:\drivers\office\winux\csk.dev
- C:\drivers\office\winux\run.bat
- C:\drivers\office\winux\project1.dll
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''