Техническая информация
- '%CommonProgramFiles%\conim.exe'
- '<SYSTEM32>\taskkill.exe' /im egui.exe /f
- '<SYSTEM32>\rundll32.exe' C:\cm.dll,box
- '<SYSTEM32>\sc.exe' delete ekrn
- '<SYSTEM32>\taskkill.exe' /im ekrn.exe /f
- ekrn.exe
- %TEMP%\ntb1.tmp
- %WINDIR%\linkinfo.dll
- %WINDIR%\system\pci.sys
- %CommonProgramFiles%\conim.exe
- C:\cm.dll
- %CommonProgramFiles%\conim.exe
- %WINDIR%\system\pci.sys
- ClassName: 'AfxControlBar42s' WindowName: ''
- ClassName: '(null)' WindowName: '(null)'