Техническая информация
- %APPDATA%\install\chrome32.exe
- <SYSTEM32>\cmd.exe /c """%TEMP%\delete.bat"""
- [<HKCU>\Software\FTPWare\COREFTP\Sites]
- %APPDATA%\install\chrome32.exe
- %TEMP%\delete.bat
- %APPDATA%\install\chrome32.exe
- 'tu######wordpress.kilu.de':80
- tu######wordpress.kilu.de/wp-admin/wp-hits/creater.php
- DNS ASK tu######wordpress.kilu.de