Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{1084763B-D2AF-15DD-9C90-F38741CBA6C9}] 'stubpath' = ''
- <SYSTEM32>\cmd.exe /c """%TEMP%\selfdel0.bat"" "
- %WINDIR%\explorer.exe
- %TEMP%\selfdel0.bat
- %PROGRAM_FILES%\livemsn\live.exe
- %TEMP%\1.tmp\batchfile.bat
- %PROGRAM_FILES%\livemsn\live.exe
- %TEMP%\1.tmp\batchfile.bat
- 'z-####20.no-ip.info':81
- DNS ASK z-####20.no-ip.info