Техническая информация
- <SYSTEM32>\wbem\scrcons.exe -Embedding
- <SYSTEM32>\cscript.exe /nologo C:\\DOCUME~1\\%USERNAME%\\LOCALS~1\\Temp\\updctbs.js
- <SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\6YQRA29M\rss[1]
- %TEMP%\updctbs.js
- %TEMP%\updctbs.js
- 'hi.##idu.com':80
- 'localhost':1036
- hi.##idu.com/jamesjs98/rss/
- DNS ASK hi.##idu.com