Техническая информация
- <SYSTEM32>\cmd.exe /c C:\2222.bat
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.ko##33.com/?xi#
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.96#8.la/?ld
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\location[1]
- %TEMP%\d.tmp
- %TEMP%\data.tmp
- C:\2222.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\new1[1].txt
- %TEMP%\d.tmp
- %TEMP%\data.tmp
- C:\2222.bat
- 'ap#.#iqwei.com':80
- 'ne#.9688.la':80
- ap#.#iqwei.com/location/
- ne#.9688.la/new1.txt
- DNS ASK ap#.#iqwei.com
- DNS ASK ne#.9688.la
- ClassName: '' WindowName: ''