Техническая информация
- '<SYSTEM32>\WScript.exe' "%TEMP%\delay.vbs"
- '<SYSTEM32>\services.exe'
- <SYSTEM32>\services.exe
- %TEMP%\delay.vbs
- %TEMP%\bdb81.tmp
- %TEMP%\Da.txt
- C:\zz.bat
- %TEMP%\bda38.tmp
- %TEMP%\bdb03.tmp
- %TEMP%\bdb81.tmp
- %TEMP%\delay.vbs
- %TEMP%\bda38.tmp
- %TEMP%\bdb03.tmp
- DNS ASK hi.##idu.com
- DNS ASK dn#.##ftncsi.com
- DNS ASK www.2p##.org
- ClassName: 'Shell_TrayWnd' WindowName: ''