Malware Analysis Report

2024-11-13 13:46

Sample ID 240719-v5zhwawbld
Target CrackLauncher.exe
SHA256 371427ad07be3f9c39773c3c0c4b95c86f63dc2e427835565b159f3686818bd0
Tags
dcrat infostealer rat
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

371427ad07be3f9c39773c3c0c4b95c86f63dc2e427835565b159f3686818bd0

Threat Level: Known bad

The file CrackLauncher.exe was found to be: Known bad.

Malicious Activity Summary

dcrat infostealer rat

DcRat

Process spawned unexpected child process

DCRat payload

Executes dropped EXE

Enumerates physical storage devices

Unsigned PE

Scheduled Task/Job: Scheduled Task

Suspicious use of WriteProcessMemory

Modifies registry class

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-07-19 17:35

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-19 17:35

Reported

2024-07-19 17:37

Platform

win10-20240404-en

Max time kernel

9s

Max time network

135s

Command Line

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

Signatures

DcRat

rat infostealer dcrat

Process spawned unexpected child process

Description Indicator Process Target
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process N/A C:\Windows\system32\schtasks.exe

DCRat payload

rat
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A

Enumerates physical storage devices

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A
Key created \REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe N/A

Scheduled Task/Job: Scheduled Task

persistence execution
Description Indicator Process Target
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A
N/A N/A C:\Windows\system32\schtasks.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2804 wrote to memory of 3292 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 2804 wrote to memory of 3292 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 2804 wrote to memory of 3292 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 2804 wrote to memory of 3196 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 2804 wrote to memory of 3196 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 2804 wrote to memory of 3196 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 3292 wrote to memory of 1568 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 3292 wrote to memory of 1568 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 3292 wrote to memory of 1568 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 3292 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 3292 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 3292 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 1568 wrote to memory of 4472 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 1568 wrote to memory of 4472 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 1568 wrote to memory of 4472 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 1568 wrote to memory of 652 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 1568 wrote to memory of 652 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 1568 wrote to memory of 652 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 3196 wrote to memory of 1500 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 3196 wrote to memory of 1500 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 3196 wrote to memory of 1500 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 4472 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 4472 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 4472 wrote to memory of 1476 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 2196 wrote to memory of 1648 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 2196 wrote to memory of 1648 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 2196 wrote to memory of 1648 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 4472 wrote to memory of 1992 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Windows\SysWOW64\WScript.exe
PID 4472 wrote to memory of 1992 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Windows\SysWOW64\WScript.exe
PID 4472 wrote to memory of 1992 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Windows\SysWOW64\WScript.exe
PID 652 wrote to memory of 3460 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 652 wrote to memory of 3460 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 652 wrote to memory of 3460 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 1476 wrote to memory of 4356 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Windows\SysWOW64\WScript.exe
PID 1476 wrote to memory of 4356 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Windows\SysWOW64\WScript.exe
PID 1476 wrote to memory of 4356 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Windows\SysWOW64\WScript.exe
PID 1476 wrote to memory of 4612 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\bridgeServercomponentFontDriver\MsHostsvc.exe
PID 1476 wrote to memory of 4612 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\bridgeServercomponentFontDriver\MsHostsvc.exe
PID 1476 wrote to memory of 4612 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\bridgeServercomponentFontDriver\MsHostsvc.exe
PID 1992 wrote to memory of 1972 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 1992 wrote to memory of 1972 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 1992 wrote to memory of 1972 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 4356 wrote to memory of 2004 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 4356 wrote to memory of 2004 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 4356 wrote to memory of 2004 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 4356 wrote to memory of 3600 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 4356 wrote to memory of 3600 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 4356 wrote to memory of 3600 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 4612 wrote to memory of 4548 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\System32\Conhost.exe
PID 4612 wrote to memory of 4548 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\System32\Conhost.exe
PID 4612 wrote to memory of 4548 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\System32\Conhost.exe
PID 2004 wrote to memory of 1084 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 2004 wrote to memory of 1084 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 2004 wrote to memory of 1084 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe
PID 2004 wrote to memory of 708 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 2004 wrote to memory of 708 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 2004 wrote to memory of 708 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe
PID 708 wrote to memory of 1192 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\bridgeServercomponentFontDriver\MsHostsvc.exe
PID 708 wrote to memory of 1192 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\bridgeServercomponentFontDriver\MsHostsvc.exe
PID 708 wrote to memory of 1192 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\bridgeServercomponentFontDriver\MsHostsvc.exe
PID 3600 wrote to memory of 2028 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 3600 wrote to memory of 2028 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 3600 wrote to memory of 2028 N/A C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe C:\Windows\SysWOW64\WScript.exe
PID 1084 wrote to memory of 4880 N/A C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

Processes

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 5 /tr "'C:\Windows\InputMethod\CHT\wscript.exe'" /f

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Windows\InputMethod\CHT\wscript.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 12 /tr "'C:\Windows\InputMethod\CHT\wscript.exe'" /rl HIGHEST /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "smsss" /sc MINUTE /mo 14 /tr "'C:\bridgeServercomponentFontDriver\smss.exe'" /f

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "smss" /sc ONLOGON /tr "'C:\bridgeServercomponentFontDriver\smss.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "smsss" /sc MINUTE /mo 6 /tr "'C:\bridgeServercomponentFontDriver\smss.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 7 /tr "'C:\Program Files\Google\Chrome\wscript.exe'" /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Program Files\Google\Chrome\wscript.exe'" /rl HIGHEST /f

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 9 /tr "'C:\Program Files\Google\Chrome\wscript.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 11 /tr "'C:\Recovery\WindowsRE\wscript.exe'" /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Recovery\WindowsRE\wscript.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 11 /tr "'C:\Recovery\WindowsRE\wscript.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 7 /tr "'C:\Users\Default User\cmd.exe'" /f

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmd" /sc ONLOGON /tr "'C:\Users\Default User\cmd.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 12 /tr "'C:\Users\Default User\cmd.exe'" /rl HIGHEST /f

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "SystemS" /sc MINUTE /mo 7 /tr "'C:\Users\Default\Downloads\System.exe'" /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "System" /sc ONLOGON /tr "'C:\Users\Default\Downloads\System.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "SystemS" /sc MINUTE /mo 6 /tr "'C:\Users\Default\Downloads\System.exe'" /rl HIGHEST /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "conhostc" /sc MINUTE /mo 8 /tr "'C:\Program Files\Windows Portable Devices\conhost.exe'" /f

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "conhost" /sc ONLOGON /tr "'C:\Program Files\Windows Portable Devices\conhost.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "conhostc" /sc MINUTE /mo 6 /tr "'C:\Program Files\Windows Portable Devices\conhost.exe'" /rl HIGHEST /f

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "íóòèïàõóéí" /sc MINUTE /mo 6 /tr "'C:\Users\Default User\íóòèïàõóé.exe'" /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "íóòèïàõóé" /sc ONLOGON /tr "'C:\Users\Default User\íóòèïàõóé.exe'" /rl HIGHEST /f

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "íóòèïàõóéí" /sc MINUTE /mo 11 /tr "'C:\Users\Default User\íóòèïàõóé.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "íóòèïàõóéí" /sc MINUTE /mo 10 /tr "'C:\Program Files (x86)\Mozilla Maintenance Service\logs\íóòèïàõóé.exe'" /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "íóòèïàõóé" /sc ONLOGON /tr "'C:\Program Files (x86)\Mozilla Maintenance Service\logs\íóòèïàõóé.exe'" /rl HIGHEST /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "íóòèïàõóéí" /sc MINUTE /mo 11 /tr "'C:\Program Files (x86)\Mozilla Maintenance Service\logs\íóòèïàõóé.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 12 /tr "'C:\bridgeServercomponentFontDriver\wscript.exe'" /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\bridgeServercomponentFontDriver\wscript.exe'" /rl HIGHEST /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 9 /tr "'C:\bridgeServercomponentFontDriver\wscript.exe'" /rl HIGHEST /f

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 7 /tr "'C:\bridgeServercomponentFontDriver\cmd.exe'" /f

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmd" /sc ONLOGON /tr "'C:\bridgeServercomponentFontDriver\cmd.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 7 /tr "'C:\bridgeServercomponentFontDriver\cmd.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 6 /tr "'C:\Windows\Setup\State\wscript.exe'" /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Windows\Setup\State\wscript.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 9 /tr "'C:\Windows\Setup\State\wscript.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 6 /tr "'C:\Windows\bcastdvr\wscript.exe'" /f

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscript" /sc ONLOGON /tr "'C:\Windows\bcastdvr\wscript.exe'" /rl HIGHEST /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "wscriptw" /sc MINUTE /mo 12 /tr "'C:\Windows\bcastdvr\wscript.exe'" /rl HIGHEST /f

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "IdleI" /sc MINUTE /mo 5 /tr "'C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe'" /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "Idle" /sc ONLOGON /tr "'C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "IdleI" /sc MINUTE /mo 7 /tr "'C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe'" /rl HIGHEST /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 6 /tr "'C:\Users\Public\Music\cmd.exe'" /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmd" /sc ONLOGON /tr "'C:\Users\Public\Music\cmd.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 5 /tr "'C:\Users\Public\Music\cmd.exe'" /rl HIGHEST /f

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 10 /tr "'C:\Users\Default\NetHood\cmd.exe'" /f

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmd" /sc ONLOGON /tr "'C:\Users\Default\NetHood\cmd.exe'" /rl HIGHEST /f

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\system32\schtasks.exe

schtasks.exe /create /tn "cmdc" /sc MINUTE /mo 6 /tr "'C:\Users\Default\NetHood\cmd.exe'" /rl HIGHEST /f

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe

"C:\Program Files (x86)\Windows NT\TableTextService\en-US\Idle.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

"C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe"

C:\Windows\SysWOW64\WScript.exe

"C:\Windows\System32\WScript.exe" "C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\bridgeServercomponentFontDriver\MsHostsvc.exe

"C:\bridgeServercomponentFontDriver\MsHostsvc.exe"

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\bridgeServercomponentFontDriver\9qhNErD.bat" "

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

"C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 23.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 210.143.182.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\CrackLauncher.exe

MD5 90094c2066f9e53cb9217876c833c269
SHA1 da9086b65e114257168e634cc921e1ab1c069144
SHA256 371427ad07be3f9c39773c3c0c4b95c86f63dc2e427835565b159f3686818bd0
SHA512 ef4a15be7efa9ac59c991c64c5afa5fb9e8015334f69e1c64315f788345c456fec5caf58605ccf08afaf16f1a2f7cc2fda1ffd85850d6c2ea268c63efc261aa8

C:\Users\Admin\AppData\Local\Temp\íóòèïàõóé.exe

MD5 d80301cde99009a601e22c0f9cb3433a
SHA1 d82a05a75f31ec11ced2f6c5e0b945510dbfcd5a
SHA256 334e48543f8c2d0203135f7820116b676467ae1c1a3d6eabd8b17f96308e5574
SHA512 02b744e15834b654b1d4772d8f2ddc26ca773a9139d9d12fec12c2749e09e69c904014c8464762a7bd97aa8413971193a8c386bb2bfecc14fc8aabd78383888b

C:\bridgeServercomponentFontDriver\SND7XTuGR2g.vbe

MD5 bd091f4d8a1df91d73b0c65a4ba02330
SHA1 bef757dc154e1d4a0fc91f8ce1e4072c4c12d6df
SHA256 7eeb92d6b5e2faca9ea5763051aac81b7851f4aefe76680ccb25a3aec7e05be2
SHA512 0559ece912e8d3f061e615dd55ced1ddb75c743014b99f4589421c192a4aadf58c41c5b8d72cb96ac3b40f4326e7a7c5791691d557036fb3df2df8f78ff2a98c

memory/4980-174-0x0000000000950000-0x0000000000C12000-memory.dmp

memory/4980-181-0x0000000002CC0000-0x0000000002CCE000-memory.dmp

memory/4980-182-0x0000000002CE0000-0x0000000002CFC000-memory.dmp

memory/4980-187-0x000000001B760000-0x000000001B770000-memory.dmp

memory/4980-186-0x000000001B750000-0x000000001B758000-memory.dmp

memory/4980-185-0x000000001B730000-0x000000001B746000-memory.dmp

memory/4980-184-0x0000000002D00000-0x0000000002D08000-memory.dmp

memory/4980-183-0x000000001BEA0000-0x000000001BEF0000-memory.dmp

memory/4980-188-0x000000001B770000-0x000000001B77A000-memory.dmp

memory/4980-189-0x000000001BEF0000-0x000000001BF46000-memory.dmp

memory/4980-190-0x000000001B780000-0x000000001B78C000-memory.dmp

memory/4980-191-0x000000001BF40000-0x000000001BF48000-memory.dmp

memory/4980-192-0x000000001BF50000-0x000000001BF5C000-memory.dmp

memory/4980-193-0x000000001BF60000-0x000000001BF72000-memory.dmp

memory/4980-196-0x000000001C4C0000-0x000000001C9E6000-memory.dmp

memory/4980-199-0x000000001BFB0000-0x000000001BFBC000-memory.dmp

memory/4980-198-0x000000001BFA0000-0x000000001BFA8000-memory.dmp

memory/4980-197-0x000000001BF90000-0x000000001BF9C000-memory.dmp

memory/4980-204-0x000000001BFC0000-0x000000001BFCE000-memory.dmp

memory/4980-205-0x000000001BFD0000-0x000000001BFDC000-memory.dmp

C:\bridgeServercomponentFontDriver\smss.exe

MD5 a7a6c9f410573c8fbd408170eab6aa33
SHA1 99354c9e2c7fc978abd47e8d2ec1a403bcc5dfd6
SHA256 9d5aaaf2551239a60ec1a383a3512be976cfaa866573e86687c59412ae167974
SHA512 f3dbb349ed88f1d9b7c6d1e0ffc2fa12b3d2f68209eaf97ff8bf4344c5a87e39ba3588584df4b656acdcf1b1526415b0a06e921f405bc836792c9b55a794d6b5

memory/4128-568-0x0000000002D00000-0x0000000002DAE000-memory.dmp

memory/4128-570-0x0000000006480000-0x0000000006551000-memory.dmp

memory/4128-569-0x0000000002D00000-0x0000000002E4A000-memory.dmp