Техническая информация
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\st1m.bat" "
- '%WINDIR%\explorer.exe'
- '<SYSTEM32>\attrib.exe'
- <SYSTEM32>\attrib.exe
- %TEMP%\st1m.bat
- 'px###.mrbasic.com':80
- px###.mrbasic.com/pub/sok8u.avi
- DNS ASK px###.mrbasic.com
- ClassName: 'shell_traywnd' WindowName: '(null)'