Техническая информация
- <SYSTEM32>\cmd.exe /c <Текущая директория>\unst.bat
- <SYSTEM32>\regsvr32.exe "%PROGRAM_FILES%\iconmaniab\iconmaniab.dll" /S
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\execute[1].php
- <Текущая директория>\unst.bat
- %PROGRAM_FILES%\iconmaniab\iconmaniab.dll
- %PROGRAM_FILES%\iconmaniab\iconmaniadel.exe
- '21#.#18.126.196':80
- 'localhost':1035
- 21#.#18.126.196/~paran/execute.php?m_###############################################################