Техническая информация
- %PROGRAM_FILES%\wordxeer\cntwxer.exe ins
- <SYSTEM32>\cmd.exe /c \DelUS.bat
- %TEMP%\nsz2.tmp\SelfDelete.dll
- C:\DelUS.bat
- %PROGRAM_FILES%\wordxeer\uninst.exe
- %PROGRAM_FILES%\wordxeer\cntwxer.exe
- %PROGRAM_FILES%\wordxeer\wordxeer.exe
- %TEMP%\nsz2.tmp\SelfDelete.dll
- 'www.to###log.co.kr':80
- www.to###log.co.kr/log/?mo##########################################
- DNS ASK www.to###log.co.kr