Техническая информация
- <SYSTEM32>\cmd.exe /c \DelUS.bat
- %TEMP%\nsy3.tmp\DLLCount3.dll
- %TEMP%\nsy3.tmp\SelfDelete.dll
- C:\DelUS.bat
- %PROGRAM_FILES%\Funpop\keyward.ini
- %TEMP%\nsi2.tmp
- %PROGRAM_FILES%\Funpop\Code.ini
- %PROGRAM_FILES%\Funpop\domainrefer.ini
- %TEMP%\nsy3.tmp\SelfDelete.dll
- %TEMP%\nsy3.tmp\DLLCount3.dll
- 'vi###tsoft.net':80
- vi###tsoft.net/counter/insert.php?db##########################################################################
- DNS ASK vi###tsoft.net