Technical Information
- '%HOMEPATH%\Desktop\System\svchost.exe' /AUTOIT3EXECUTELINE "IF PROCESSWAITCLOSE(880) THEN SHELLEXECUTE('%HOMEPATH%\Desktop\System\svchost.exe')"
- '%HOMEPATH%\Desktop\System\svchost.exe'
- '%TEMP%\A4wDVy8H9\A4wDVy8H9.exe'
- '%TEMP%\Rgi3Z3.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\681521.bat" "%HOMEPATH%\Desktop\System\svchost.exe" "
- '<SYSTEM32>\DllHost.exe' /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
- '<SYSTEM32>\wscript.exe' A02iA1ZmC.vbs
- ClassName: 'FilemonClass' WindowName: '(null)'
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: '(null)'
- ClassName: 'RegmonClass' WindowName: '(null)'
- ClassName: 'OLLYDBG' WindowName: '(null)'
- ClassName: 'GBDYLLO' WindowName: '(null)'
- ClassName: 'pediy06' WindowName: '(null)'
- %TEMP%\A4wDVy8H9\vicnnn.exe.293.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.294.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.292.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.290.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.291.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.298.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.299.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.297.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.295.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.296.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.284.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.285.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.283.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.281.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.282.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.289.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.29.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.288.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.286.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.287.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.3.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.311.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.312.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.310.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.309.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.31.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.316.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.317.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.315.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.313.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.314.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.302.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.303.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.301.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.30.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.300.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.307.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.308.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.306.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.304.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.305.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.256.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.257.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.255.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.253.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.254.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.260.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.261.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.26.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.258.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.259.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.247.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.248.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.246.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.244.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.245.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.251.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.252.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.250.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.249.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.25.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.262.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.275.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.276.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.274.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.272.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.273.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.28.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.280.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.279.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.277.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.278.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.266.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.267.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.265.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.263.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.264.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.270.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.271.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.27.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.268.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.269.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.77.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.78.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.76.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.74.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.75.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.81.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.82.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.80.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.79.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.8.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.68.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.69.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.67.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.65.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.66.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.72.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.73.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.71.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.7.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.70.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.83.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.96.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.97.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.95.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.93.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.94.part
- %HOMEPATH%\Desktop\System\svchost.exe
- %TEMP%\681521.bat
- %TEMP%\Rgi3Z3.exe
- %TEMP%\A4wDVy8H9\vicnnn.exe.98.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.99.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.87.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.88.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.86.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.84.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.85.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.91.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.92.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.90.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.89.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.9.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.4.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.40.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.39.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.37.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.38.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.44.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.45.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.43.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.41.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.42.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.320.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.321.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.32.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.318.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.319.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.35.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.36.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.34.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.322.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.33.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.46.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.59.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.6.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.58.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.56.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.57.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.63.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.64.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.62.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.60.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.61.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.5.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.50.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.49.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.47.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.48.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.54.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.55.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.53.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.51.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.52.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.145.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.146.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.144.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.142.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.143.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.15.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.150.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.149.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.147.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.148.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.136.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.137.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.135.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.133.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.134.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.140.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.141.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.14.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.138.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.139.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.151.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.164.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.165.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.163.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.161.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.162.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.169.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.17.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.168.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.166.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.167.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.155.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.156.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.154.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.152.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.153.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.16.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.160.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.159.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.157.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.158.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.108.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.109.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.107.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.105.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.106.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.112.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.113.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.111.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.11.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.110.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.1.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.10.part
- %TEMP%\A4wDVy8H9\A4RAN5kMH.bat
- %TEMP%\A4wDVy8H9\9Fx70s3U.bat
- %TEMP%\A4wDVy8H9\A02iA1ZmC.vbs
- %TEMP%\A4wDVy8H9\vicnnn.exe.103.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.104.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.102.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.100.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.101.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.114.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.127.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.128.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.126.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.124.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.125.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.131.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.132.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.130.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.129.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.13.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.118.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.119.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.117.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.115.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.116.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.122.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.123.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.121.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.12.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.120.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.219.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.22.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.218.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.216.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.217.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.223.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.224.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.222.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.220.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.221.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.21.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.210.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.209.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.207.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.208.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.214.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.215.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.213.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.211.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.212.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.225.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.238.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.239.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.237.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.235.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.236.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.242.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.243.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.241.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.24.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.240.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.229.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.23.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.228.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.226.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.227.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.233.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.234.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.232.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.230.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.231.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.182.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.183.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.181.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.18.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.180.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.187.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.188.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.186.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.184.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.185.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.173.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.174.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.172.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.170.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.171.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.178.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.179.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.177.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.175.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.176.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.189.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.200.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.201.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.20.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.199.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.2.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.205.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.206.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.204.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.202.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.203.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.192.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.193.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.191.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.19.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.190.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.197.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.198.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.196.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.194.part
- %TEMP%\A4wDVy8H9\vicnnn.exe.195.part
- %HOMEPATH%\Desktop\System\svchost.exe
- from %TEMP%\A4wDVy8H9\vicnnn.exe.1.part to %TEMP%\A4wDVy8H9\A4wDVy8H9.exe
- ClassName: '18467-41' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'Registry Monitor - Sysinternals: www.sysinternals.com'
- ClassName: '(null)' WindowName: 'File Monitor - Sysinternals: www.sysinternals.com'
- ClassName: '(null)' WindowName: 'Process Monitor - Sysinternals: www.sysinternals.com'