Техническая информация
- <SYSTEM32>\cmd.exe /c \DelUS.bat
- C:\DelUS.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\opencp07[1].exe
- %PROGRAM_FILES%\OpenCap\temp\opencp07.exe
- %TEMP%\nsu2.tmp\DLLWebCount.dll
- %TEMP%\opencp07_inst.exe
- %TEMP%\nsu2.tmp\SelfDelete.dll
- %PROGRAM_FILES%\OpenCap\temp\opencp07.exe
- %TEMP%\nsu2.tmp\SelfDelete.dll
- %TEMP%\nsu2.tmp\DLLWebCount.dll
- 'op####pture.co.kr':80
- 'localhost':1038
- '22#.#22.140.75':80
- op####pture.co.kr/down/opencp07.exe
- 22#.#22.140.75/request/count.php?mo##########################
- DNS ASK op####pture.co.kr