Техническая информация
- '<SYSTEM32>\wscript.exe' "%TEMP%\delay.vbs"
- '<SYSTEM32>\cmd.exe' /c c:\zz.bat
- '<SYSTEM32>\services.exe'
- <SYSTEM32>\services.exe
- %TEMP%\305af.tmp
- %TEMP%\30e0d.tmp
- %TEMP%\Da.txt
- C:\zz.bat
- %TEMP%\delay.vbs
- %TEMP%\2f543.tmp
- %TEMP%\305af.tmp
- %TEMP%\30e0d.tmp
- %TEMP%\delay.vbs
- %TEMP%\2f543.tmp
- '12#.#25.114.144':80
- 'www.2p##.org':80
- 'localhost':1036
- 12#.#25.114.144/fenshou010
- www.2p##.org/1.txt
- DNS ASK hi.##idu.com
- DNS ASK www.2p##.org
- ClassName: 'Shell_TrayWnd' WindowName: ''