Analysis Overview
SHA256
371427ad07be3f9c39773c3c0c4b95c86f63dc2e427835565b159f3686818bd0
Threat Level: Known bad
The file CrackLauncher.exe was found to be: Known bad.
Malicious Activity Summary
DcRat
Process spawned unexpected child process
DCRat payload
Executes dropped EXE
Enumerates physical storage devices
Unsigned PE
Scheduled Task/Job: Scheduled Task
Suspicious use of WriteProcessMemory
Modifies registry class
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-07-19 17:35
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-07-19 17:35
Reported
2024-07-19 17:37
Platform
win10-20240404-en
Max time kernel
9s
Max time network
135s
Command Line
Signatures
DcRat
Process spawned unexpected child process
| Description | Indicator | Process | Target |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe | |
| Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process | N/A | C:\Windows\system32\schtasks.exe |
DCRat payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Executes dropped EXE
Enumerates physical storage devices
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings | C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe | N/A |
Scheduled Task/Job: Scheduled Task
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 5 /tr "'C:\Windows\InputMethod\CHT\wscript.exe'" /f
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Windows\InputMethod\CHT\wscript.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 12 /tr "'C:\Windows\InputMethod\CHT\wscript.exe'" /rl HIGHEST /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "smsss" /sc MINUTE /mo 14 /tr "'C:\bridgeServercomponentFontDriver\smss.exe'" /f
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "smss" /sc ONLOGON /tr "'C:\bridgeServercomponentFontDriver\smss.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "smsss" /sc MINUTE /mo 6 /tr "'C:\bridgeServercomponentFontDriver\smss.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 7 /tr "'C:\Program Files\Google\Chrome\wscript.exe'" /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Program Files\Google\Chrome\wscript.exe'" /rl HIGHEST /f
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 9 /tr "'C:\Program Files\Google\Chrome\wscript.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 11 /tr "'C:\Recovery\WindowsRE\wscript.exe'" /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Recovery\WindowsRE\wscript.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 11 /tr "'C:\Recovery\WindowsRE\wscript.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 7 /tr "'C:\Users\Default User\cmd.exe'" /f
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmd" /sc ONLOGON /tr "'C:\Users\Default User\cmd.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 12 /tr "'C:\Users\Default User\cmd.exe'" /rl HIGHEST /f
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "SystemS" /sc MINUTE /mo 7 /tr "'C:\Users\Default\Downloads\System.exe'" /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "System" /sc ONLOGON /tr "'C:\Users\Default\Downloads\System.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "SystemS" /sc MINUTE /mo 6 /tr "'C:\Users\Default\Downloads\System.exe'" /rl HIGHEST /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "conhostc" /sc MINUTE /mo 8 /tr "'C:\Program Files\Windows Portable Devices\conhost.exe'" /f
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "conhost" /sc ONLOGON /tr "'C:\Program Files\Windows Portable Devices\conhost.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "conhostc" /sc MINUTE /mo 6 /tr "'C:\Program Files\Windows Portable Devices\conhost.exe'" /rl HIGHEST /f
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "íóòèïàõóéí" /sc MINUTE /mo 6 /tr "'C:\Users\Default User\íóòèïàõóé.exe'" /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "íóòèïàõóé" /sc ONLOGON /tr "'C:\Users\Default User\íóòèïàõóé.exe'" /rl HIGHEST /f
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "íóòèïàõóéí" /sc MINUTE /mo 11 /tr "'C:\Users\Default User\íóòèïàõóé.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "íóòèïàõóéí" /sc MINUTE /mo 10 /tr "'C:\Program Files (x86)\Mozilla Maintenance Service\logs\íóòèïàõóé.exe'" /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "íóòèïàõóé" /sc ONLOGON /tr "'C:\Program Files (x86)\Mozilla Maintenance Service\logs\íóòèïàõóé.exe'" /rl HIGHEST /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "íóòèïàõóéí" /sc MINUTE /mo 11 /tr "'C:\Program Files (x86)\Mozilla Maintenance Service\logs\íóòèïàõóé.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 12 /tr "'C:\bridgeServercomponentFontDriver\wscript.exe'" /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\bridgeServercomponentFontDriver\wscript.exe'" /rl HIGHEST /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 9 /tr "'C:\bridgeServercomponentFontDriver\wscript.exe'" /rl HIGHEST /f
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 7 /tr "'C:\bridgeServercomponentFontDriver\cmd.exe'" /f
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmd" /sc ONLOGON /tr "'C:\bridgeServercomponentFontDriver\cmd.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 7 /tr "'C:\bridgeServercomponentFontDriver\cmd.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 6 /tr "'C:\Windows\Setup\State\wscript.exe'" /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Windows\Setup\State\wscript.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 9 /tr "'C:\Windows\Setup\State\wscript.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 6 /tr "'C:\Windows\bcastdvr\wscript.exe'" /f
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Windows\bcastdvr\wscript.exe'" /rl HIGHEST /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 12 /tr "'C:\Windows\bcastdvr\wscript.exe'" /rl HIGHEST /f
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "IdleI" /sc MINUTE /mo 5 /tr "'C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe'" /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "Idle" /sc ONLOGON /tr "'C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "IdleI" /sc MINUTE /mo 7 /tr "'C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe'" /rl HIGHEST /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 6 /tr "'C:\Users\Public\Music\cmd.exe'" /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmd" /sc ONLOGON /tr "'C:\Users\Public\Music\cmd.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 5 /tr "'C:\Users\Public\Music\cmd.exe'" /rl HIGHEST /f
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 10 /tr "'C:\Users\Default\NetHood\cmd.exe'" /f
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmd" /sc ONLOGON /tr "'C:\Users\Default\NetHood\cmd.exe'" /rl HIGHEST /f
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\system32\schtasks.exe
schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 6 /tr "'C:\Users\Default\NetHood\cmd.exe'" /rl HIGHEST /f
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe
"C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"
C:\Windows\SysWOW64\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\bridgeServercomponentFontDriver\MsHostsvc.exe
"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 23.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 210.143.182.52.in-addr.arpa | udp |
Files
C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
| MD5 | 90094c2066f9e53cb9217876c833c269 |
| SHA1 | da9086b65e114257168e634cc921e1ab1c069144 |
| SHA256 | 371427ad07be3f9c39773c3c0c4b95c86f63dc2e427835565b159f3686818bd0 |
| SHA512 | ef4a15be7efa9ac59c991c64c5afa5fb9e8015334f69e1c64315f788345c456fec5caf58605ccf08afaf16f1a2f7cc2fda1ffd85850d6c2ea268c63efc261aa8 |
C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
| MD5 | d80301cde99009a601e22c0f9cb3433a |
| SHA1 | d82a05a75f31ec11ced2f6c5e0b945510dbfcd5a |
| SHA256 | 334e48543f8c2d0203135f7820116b676467ae1c1a3d6eabd8b17f96308e5574 |
| SHA512 | 02b744e15834b654b1d4772d8f2ddc26ca773a9139d9d12fec12c2749e09e69c904014c8464762a7bd97aa8413971193a8c386bb2bfecc14fc8aabd78383888b |
C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe
| MD5 | bd091f4d8a1df91d73b0c65a4ba02330 |
| SHA1 | bef757dc154e1d4a0fc91f8ce1e4072c4c12d6df |
| SHA256 | 7eeb92d6b5e2faca9ea5763051aac81b7851f4aefe76680ccb25a3aec7e05be2 |
| SHA512 | 0559ece912e8d3f061e615dd55ced1ddb75c743014b99f4589421c192a4aadf58c41c5b8d72cb96ac3b40f4326e7a7c5791691d557036fb3df2df8f78ff2a98c |
memory/4980-174-0x0000000000950000-0x0000000000C12000-memory.dmp
memory/4980-181-0x0000000002CC0000-0x0000000002CCE000-memory.dmp
memory/4980-182-0x0000000002CE0000-0x0000000002CFC000-memory.dmp
memory/4980-187-0x000000001B760000-0x000000001B770000-memory.dmp
memory/4980-186-0x000000001B750000-0x000000001B758000-memory.dmp
memory/4980-185-0x000000001B730000-0x000000001B746000-memory.dmp
memory/4980-184-0x0000000002D00000-0x0000000002D08000-memory.dmp
memory/4980-183-0x000000001BEA0000-0x000000001BEF0000-memory.dmp
memory/4980-188-0x000000001B770000-0x000000001B77A000-memory.dmp
memory/4980-189-0x000000001BEF0000-0x000000001BF46000-memory.dmp
memory/4980-190-0x000000001B780000-0x000000001B78C000-memory.dmp
memory/4980-191-0x000000001BF40000-0x000000001BF48000-memory.dmp
memory/4980-192-0x000000001BF50000-0x000000001BF5C000-memory.dmp
memory/4980-193-0x000000001BF60000-0x000000001BF72000-memory.dmp
memory/4980-196-0x000000001C4C0000-0x000000001C9E6000-memory.dmp
memory/4980-199-0x000000001BFB0000-0x000000001BFBC000-memory.dmp
memory/4980-198-0x000000001BFA0000-0x000000001BFA8000-memory.dmp
memory/4980-197-0x000000001BF90000-0x000000001BF9C000-memory.dmp
memory/4980-204-0x000000001BFC0000-0x000000001BFCE000-memory.dmp
memory/4980-205-0x000000001BFD0000-0x000000001BFDC000-memory.dmp
C:\bridgeServercomponentFontDriver\smss.exe
| MD5 | a7a6c9f410573c8fbd408170eab6aa33 |
| SHA1 | 99354c9e2c7fc978abd47e8d2ec1a403bcc5dfd6 |
| SHA256 | 9d5aaaf2551239a60ec1a383a3512be976cfaa866573e86687c59412ae167974 |
| SHA512 | f3dbb349ed88f1d9b7c6d1e0ffc2fa12b3d2f68209eaf97ff8bf4344c5a87e39ba3588584df4b656acdcf1b1526415b0a06e921f405bc836792c9b55a794d6b5 |
memory/4128-568-0x0000000002D00000-0x0000000002DAE000-memory.dmp
memory/4128-570-0x0000000006480000-0x0000000006551000-memory.dmp
memory/4128-569-0x0000000002D00000-0x0000000002E4A000-memory.dmp