Техническая информация
- 'C:\crossfire.exe'
- '<SYSTEM32>\cmd.exe' /c c:\delus.bat
- '<SYSTEM32>\taskkill.exe' /f /im cs.pif
- '<SYSTEM32>\taskkill.exe' /f /im crossfire.exe
- C:\crossfire.exe
- %HOMEPATH%\Desktop\МЪСёQ Q.lnk
- C:\delus.bat
- %WINDIR%\love.7z
- %WINDIR%\Hose.7z
- %WINDIR%\love.exe
- %WINDIR%\Hose.7z
- %WINDIR%\love.7z
- 'ne#####nlv.kmdns.net':8888
- DNS ASK ne#####nlv.kmdns.net
- ClassName: '(null)' WindowName: '(null)'