Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /f /im explorer.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im taskmgr.exe
- %WINDIR%\explorer.exe
- %TEMP%\rarsfx0\terraform (1).vbs
- %TEMP%\rarsfx0\l.ico
- ClassName: 'EDIT' WindowName: ''
- ClassName: '' WindowName: ''
- '%WINDIR%\syswow64\wscript.exe' "%TEMP%\RarSFX0\TeRraForm (1).vbs"
- '%WINDIR%\syswow64\shutdown.exe' -t 3600 -s -c ÂÛ Гà êà çà ГГ»!