Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\lsass.exe
- '%HOMEPATH%\Start Menu\Programs\Startup\lsass.exe'
- '%HOMEPATH%\zzhol\ppen.com' 1552270.IYW
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\zzhol\6031066.vbe"
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
- %HOMEPATH%\zzhol\1552270.IYW
- %HOMEPATH%\zzhol\15996.MQK
- %HOMEPATH%\zzhol\6031066.vbe
- %HOMEPATH%\zzhol\18242.ZNC
- %HOMEPATH%\zzhol\ppen.com
- %HOMEPATH%\zzhol\6031066.vbe
- %HOMEPATH%\zzhol\1552270.IYW
- %HOMEPATH%\zzhol\18242.ZNC
- %HOMEPATH%\zzhol\ppen.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'