Техническая информация
- 'C:\crossfire.exe'
- '<SYSTEM32>\cmd.exe' /c c:\delus.bat
- '<SYSTEM32>\taskkill.exe' /f /im cs.pif
- '<SYSTEM32>\taskkill.exe' /f /im crossfire.exe
- C:\crossfire.exe
- %HOMEPATH%\Desktop\МЪСёQ Q.lnk
- C:\delus.bat
- %WINDIR%\love.exe
- %WINDIR%\love.7z
- %WINDIR%\Hose.7z
- C:\asd.xls
- %WINDIR%\Hose.7z
- %WINDIR%\love.7z
- 'ha##.#aozi66.com':2014
- DNS ASK ha##.#aozi66.com
- ClassName: '(null)' WindowName: '(null)'