Техническая информация
- <SYSTEM32>\cmd.exe /c afc9fe2f418b00a0.bat
- <SYSTEM32>\rundll32.exe "%PROGRAM_FILES%\WINDOWSWW.INI" ServiceMain
- <SYSTEM32>\taskkill.exe /F /T /IM WP.EXE
- C:\Sofe0\WPs.lnk
- <Текущая директория>\afc9fe2f418b00a0.bat
- %PROGRAM_FILES%\WINDOWSWW.INI
- C:\Sofe0\WP.exe
- 'mi####0.3322.org':10000
- DNS ASK mi####0.3322.org
- ClassName: '' WindowName: ''