Техническая информация
- %PROGRAM_FILES%\Outlook Express\httph.exe
- <SYSTEM32>\wscript.exe "c:\vbs2.vbs"
- <SYSTEM32>\wbem\mofcomp.exe -N:root\cimv2 <SYSTEM32>\wbem\asecimv2.mof
- <SYSTEM32>\wscript.exe "c:\vbs1.vbs"
- C:\vbs2.vbs
- <SYSTEM32>\wbem\asecimv2.mof
- %TEMP%\tmp1.tmp
- %PROGRAM_FILES%\Outlook Express\httph.exe
- %PROGRAM_FILES%\Outlook Express\msoee.dll
- C:\vbs1.vbs
- C:\vbs2.vbs
- C:\vbs1.vbs
- %TEMP%\tmp1.tmp
- <SYSTEM32>\wbem\asecimv2.mof
- 'xi####z.3322.org':798
- DNS ASK xi####z.3322.org