Техническая информация
- '<SYSTEM32>\ping.exe' -n 120 127.0.0.1 2
- '<SYSTEM32>\cmd.exe' /c ""%APPDATA%\del.bat" "
- %APPDATA%\del.bat
- %APPDATA%\Common Files\Plugins\index.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].html
- %APPDATA%\Common Files\Plugins\index.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].html
- 'www.rv##ar.biz':80
- www.rv##ar.biz/3vvv/index.html
- DNS ASK www.rv##ar.biz