Техническая информация
- <SYSTEM32>\cmd.exe /c <SYSTEM32>\tmp.bat
- <SYSTEM32>\tmp.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\s[1]
- 'www.ba##u.com':80
- www.ba##u.com/s?lm#############################################
- DNS ASK www.ba##u.com