Техническая информация
- %WINDIR%\recovery.exe
- <SYSTEM32>\expand.exe <SYSTEM32>\fuhy.cab -F:*.* <SYSTEM32>\
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bobo[1].bmp
- <SYSTEM32>\fuhy.cab
- %WINDIR%\recovery.exe
- %TEMP%\~DF260C.tmp
- 'pt#.org.pl':80
- 'localhost':1036
- pt#.org.pl/themes/PTT/docs/~/bobo.bmp
- DNS ASK pt#.org.pl