Техническая информация
- <SYSTEM32>\comres.dll файлом %WINDIR%\rxing.bat
- <SYSTEM32>\cmd.exe /c ""%WINDIR%\mssoft.bat" "
- <SYSTEM32>\taskkill.exe /f /im qq.exe /t
- %WINDIR%\explorer.exe C:\hellboy.bat
- <SYSTEM32>\cmd.exe /c ""C:\hellboy.bat" "
- C:\dd.bat
- %WINDIR%\mssoft.bat
- C:\hellboy.bmp
- %WINDIR%\hpig_WS2.dat
- %WINDIR%\rxing.bat
- <SYSTEM32>\comres.dll в %WINDIR%\hexil.dll
- '67.##5.160.76':80
- 67.##5.160.76/
- DNS ASK www.ya##o.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: '' WindowName: ''