Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows.exe' = '%TEMP%\Windows\Windows.exe'
- A2Emf8nto.exe
- %TEMP%\11.exee.268.plaha
- %TEMP%\11.exee.269.plaha
- %TEMP%\11.exee.266.plaha
- %TEMP%\11.exee.267.plaha
- %TEMP%\11.exee.271.plaha
- %TEMP%\11.exee.272.plaha
- %TEMP%\11.exee.27.plaha
- %TEMP%\11.exee.270.plaha
- %TEMP%\11.exee.265.plaha
- %TEMP%\11.exee.26.plaha
- %TEMP%\11.exee.260.plaha
- %TEMP%\11.exee.258.plaha
- %TEMP%\11.exee.259.plaha
- %TEMP%\11.exee.263.plaha
- %TEMP%\11.exee.264.plaha
- %TEMP%\11.exee.261.plaha
- %TEMP%\11.exee.262.plaha
- %TEMP%\11.exee.273.plaha
- %TEMP%\11.exee.33.plaha
- %TEMP%\11.exee.34.plaha
- %TEMP%\11.exee.31.plaha
- %TEMP%\11.exee.32.plaha
- %TEMP%\11.exee.37.plaha
- %TEMP%\11.exee.38.plaha
- %TEMP%\11.exee.35.plaha
- %TEMP%\11.exee.36.plaha
- %TEMP%\11.exee.30.plaha
- %TEMP%\11.exee.276.plaha
- %TEMP%\11.exee.277.plaha
- %TEMP%\11.exee.274.plaha
- %TEMP%\11.exee.275.plaha
- %TEMP%\11.exee.29.plaha
- %TEMP%\11.exee.3.plaha
- %TEMP%\11.exee.278.plaha
- %TEMP%\11.exee.28.plaha
- %TEMP%\11.exee.236.plaha
- %TEMP%\11.exee.237.plaha
- %TEMP%\11.exee.234.plaha
- %TEMP%\11.exee.235.plaha
- %TEMP%\11.exee.24.plaha
- %TEMP%\11.exee.240.plaha
- %TEMP%\11.exee.238.plaha
- %TEMP%\11.exee.239.plaha
- %TEMP%\11.exee.233.plaha
- %TEMP%\11.exee.228.plaha
- %TEMP%\11.exee.229.plaha
- %TEMP%\11.exee.226.plaha
- %TEMP%\11.exee.227.plaha
- %TEMP%\11.exee.231.plaha
- %TEMP%\11.exee.232.plaha
- %TEMP%\11.exee.23.plaha
- %TEMP%\11.exee.230.plaha
- %TEMP%\11.exee.241.plaha
- %TEMP%\11.exee.252.plaha
- %TEMP%\11.exee.253.plaha
- %TEMP%\11.exee.250.plaha
- %TEMP%\11.exee.251.plaha
- %TEMP%\11.exee.256.plaha
- %TEMP%\11.exee.257.plaha
- %TEMP%\11.exee.254.plaha
- %TEMP%\11.exee.255.plaha
- %TEMP%\11.exee.25.plaha
- %TEMP%\11.exee.244.plaha
- %TEMP%\11.exee.245.plaha
- %TEMP%\11.exee.242.plaha
- %TEMP%\11.exee.243.plaha
- %TEMP%\11.exee.248.plaha
- %TEMP%\11.exee.249.plaha
- %TEMP%\11.exee.246.plaha
- %TEMP%\11.exee.247.plaha
- %TEMP%\11.exee.39.plaha
- %TEMP%\11.exee.81.plaha
- %TEMP%\11.exee.82.plaha
- %TEMP%\11.exee.8.plaha
- %TEMP%\11.exee.80.plaha
- %TEMP%\11.exee.85.plaha
- %TEMP%\11.exee.86.plaha
- %TEMP%\11.exee.83.plaha
- %TEMP%\11.exee.84.plaha
- %TEMP%\11.exee.79.plaha
- %TEMP%\11.exee.73.plaha
- %TEMP%\11.exee.74.plaha
- %TEMP%\11.exee.71.plaha
- %TEMP%\11.exee.72.plaha
- %TEMP%\11.exee.77.plaha
- %TEMP%\11.exee.78.plaha
- %TEMP%\11.exee.75.plaha
- %TEMP%\11.exee.76.plaha
- %TEMP%\11.exee.87.plaha
- %TEMP%\11.exee.98.plaha
- %TEMP%\11.exee.99.plaha
- %TEMP%\11.exee.96.plaha
- %TEMP%\11.exee.97.plaha
- %TEMP%\Lv7O13GT.bat
- %TEMP%\Windows\Windows.exe
- %TEMP%\A97xsW3Z2.bat
- %TEMP%\AKhEc4P5a.vbs
- %TEMP%\11.exee.95.plaha
- %TEMP%\11.exee.9.plaha
- %TEMP%\11.exee.90.plaha
- %TEMP%\11.exee.88.plaha
- %TEMP%\11.exee.89.plaha
- %TEMP%\11.exee.93.plaha
- %TEMP%\11.exee.94.plaha
- %TEMP%\11.exee.91.plaha
- %TEMP%\11.exee.92.plaha
- %TEMP%\11.exee.5.plaha
- %TEMP%\11.exee.50.plaha
- %TEMP%\11.exee.48.plaha
- %TEMP%\11.exee.49.plaha
- %TEMP%\11.exee.53.plaha
- %TEMP%\11.exee.54.plaha
- %TEMP%\11.exee.51.plaha
- %TEMP%\11.exee.52.plaha
- %TEMP%\11.exee.47.plaha
- %TEMP%\11.exee.41.plaha
- %TEMP%\11.exee.42.plaha
- %TEMP%\11.exee.4.plaha
- %TEMP%\11.exee.40.plaha
- %TEMP%\11.exee.45.plaha
- %TEMP%\11.exee.46.plaha
- %TEMP%\11.exee.43.plaha
- %TEMP%\11.exee.44.plaha
- %TEMP%\11.exee.55.plaha
- %TEMP%\11.exee.66.plaha
- %TEMP%\11.exee.67.plaha
- %TEMP%\11.exee.64.plaha
- %TEMP%\11.exee.65.plaha
- %TEMP%\11.exee.7.plaha
- %TEMP%\11.exee.70.plaha
- %TEMP%\11.exee.68.plaha
- %TEMP%\11.exee.69.plaha
- %TEMP%\11.exee.63.plaha
- %TEMP%\11.exee.58.plaha
- %TEMP%\11.exee.59.plaha
- %TEMP%\11.exee.56.plaha
- %TEMP%\11.exee.57.plaha
- %TEMP%\11.exee.61.plaha
- %TEMP%\11.exee.62.plaha
- %TEMP%\11.exee.6.plaha
- %TEMP%\11.exee.60.plaha
- %TEMP%\11.exee.140.plaha
- %TEMP%\11.exee.141.plaha
- %TEMP%\11.exee.139.plaha
- %TEMP%\11.exee.14.plaha
- %TEMP%\11.exee.144.plaha
- %TEMP%\11.exee.145.plaha
- %TEMP%\11.exee.142.plaha
- %TEMP%\11.exee.143.plaha
- %TEMP%\11.exee.138.plaha
- %TEMP%\11.exee.132.plaha
- %TEMP%\11.exee.133.plaha
- %TEMP%\11.exee.130.plaha
- %TEMP%\11.exee.131.plaha
- %TEMP%\11.exee.136.plaha
- %TEMP%\11.exee.137.plaha
- %TEMP%\11.exee.134.plaha
- %TEMP%\11.exee.135.plaha
- %TEMP%\11.exee.146.plaha
- %TEMP%\11.exee.157.plaha
- %TEMP%\11.exee.158.plaha
- %TEMP%\11.exee.155.plaha
- %TEMP%\11.exee.156.plaha
- %TEMP%\11.exee.160.plaha
- %TEMP%\11.exee.161.plaha
- %TEMP%\11.exee.159.plaha
- %TEMP%\11.exee.16.plaha
- %TEMP%\11.exee.154.plaha
- %TEMP%\11.exee.149.plaha
- %TEMP%\11.exee.15.plaha
- %TEMP%\11.exee.147.plaha
- %TEMP%\11.exee.148.plaha
- %TEMP%\11.exee.152.plaha
- %TEMP%\11.exee.153.plaha
- %TEMP%\11.exee.150.plaha
- %TEMP%\11.exee.151.plaha
- %TEMP%\11.exee.109.plaha
- %TEMP%\11.exee.11.plaha
- %TEMP%\11.exee.107.plaha
- %TEMP%\11.exee.108.plaha
- %TEMP%\11.exee.112.plaha
- %TEMP%\11.exee.113.plaha
- %TEMP%\11.exee.110.plaha
- %TEMP%\11.exee.111.plaha
- %TEMP%\11.exee.106.plaha
- %TEMP%\11.exee.100.plaha
- %TEMP%\11.exee.101.plaha
- %TEMP%\11.exee.1.plaha
- %TEMP%\11.exee.10.plaha
- %TEMP%\11.exee.104.plaha
- %TEMP%\11.exee.105.plaha
- %TEMP%\11.exee.102.plaha
- %TEMP%\11.exee.103.plaha
- %TEMP%\11.exee.114.plaha
- %TEMP%\11.exee.125.plaha
- %TEMP%\11.exee.126.plaha
- %TEMP%\11.exee.123.plaha
- %TEMP%\11.exee.124.plaha
- %TEMP%\11.exee.129.plaha
- %TEMP%\11.exee.13.plaha
- %TEMP%\11.exee.127.plaha
- %TEMP%\11.exee.128.plaha
- %TEMP%\11.exee.122.plaha
- %TEMP%\11.exee.117.plaha
- %TEMP%\11.exee.118.plaha
- %TEMP%\11.exee.115.plaha
- %TEMP%\11.exee.116.plaha
- %TEMP%\11.exee.120.plaha
- %TEMP%\11.exee.121.plaha
- %TEMP%\11.exee.119.plaha
- %TEMP%\11.exee.12.plaha
- %TEMP%\11.exee.162.plaha
- %TEMP%\11.exee.204.plaha
- %TEMP%\11.exee.205.plaha
- %TEMP%\11.exee.202.plaha
- %TEMP%\11.exee.203.plaha
- %TEMP%\11.exee.208.plaha
- %TEMP%\11.exee.209.plaha
- %TEMP%\11.exee.206.plaha
- %TEMP%\11.exee.207.plaha
- %TEMP%\11.exee.201.plaha
- %TEMP%\11.exee.197.plaha
- %TEMP%\11.exee.198.plaha
- %TEMP%\11.exee.195.plaha
- %TEMP%\11.exee.196.plaha
- %TEMP%\11.exee.20.plaha
- %TEMP%\11.exee.200.plaha
- %TEMP%\11.exee.199.plaha
- %TEMP%\11.exee.2.plaha
- %TEMP%\11.exee.21.plaha
- %TEMP%\11.exee.220.plaha
- %TEMP%\11.exee.221.plaha
- %TEMP%\11.exee.219.plaha
- %TEMP%\11.exee.22.plaha
- %TEMP%\11.exee.224.plaha
- %TEMP%\11.exee.225.plaha
- %TEMP%\11.exee.222.plaha
- %TEMP%\11.exee.223.plaha
- %TEMP%\11.exee.218.plaha
- %TEMP%\11.exee.212.plaha
- %TEMP%\11.exee.213.plaha
- %TEMP%\11.exee.210.plaha
- %TEMP%\11.exee.211.plaha
- %TEMP%\11.exee.216.plaha
- %TEMP%\11.exee.217.plaha
- %TEMP%\11.exee.214.plaha
- %TEMP%\11.exee.215.plaha
- %TEMP%\11.exee.173.plaha
- %TEMP%\11.exee.174.plaha
- %TEMP%\11.exee.171.plaha
- %TEMP%\11.exee.172.plaha
- %TEMP%\11.exee.177.plaha
- %TEMP%\11.exee.178.plaha
- %TEMP%\11.exee.175.plaha
- %TEMP%\11.exee.176.plaha
- %TEMP%\11.exee.170.plaha
- %TEMP%\11.exee.165.plaha
- %TEMP%\11.exee.166.plaha
- %TEMP%\11.exee.163.plaha
- %TEMP%\11.exee.164.plaha
- %TEMP%\11.exee.169.plaha
- %TEMP%\11.exee.17.plaha
- %TEMP%\11.exee.167.plaha
- %TEMP%\11.exee.168.plaha
- %TEMP%\11.exee.179.plaha
- %TEMP%\11.exee.19.plaha
- %TEMP%\11.exee.190.plaha
- %TEMP%\11.exee.188.plaha
- %TEMP%\11.exee.189.plaha
- %TEMP%\11.exee.193.plaha
- %TEMP%\11.exee.194.plaha
- %TEMP%\11.exee.191.plaha
- %TEMP%\11.exee.192.plaha
- %TEMP%\11.exee.187.plaha
- %TEMP%\11.exee.181.plaha
- %TEMP%\11.exee.182.plaha
- %TEMP%\11.exee.18.plaha
- %TEMP%\11.exee.180.plaha
- %TEMP%\11.exee.185.plaha
- %TEMP%\11.exee.186.plaha
- %TEMP%\11.exee.183.plaha
- %TEMP%\11.exee.184.plaha
- from %TEMP%\11.exee.1.plaha to %TEMP%\A2Emf8nto.exe
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\A2Emf8nto.exe'
- '<SYSTEM32>\cmd.exe' /c A97xsW3Z2.bat
- '<SYSTEM32>\wscript.exe' AKhEc4P5a.vbs