Техническая информация
- Диспетчера задач (Taskmgr)
- '<SYSTEM32>\cscript.exe' //B //Nologo downloader.vbs
- %APPDATA%\downloader.vbs
- %APPDATA%\dl-vbs.bmp
- %HOMEPATH%\My Documents\downloader.vbs
- %HOMEPATH%\My Documents\dl-vbs.bmp
- %HOMEPATH%\My Documents\dl-vbs.bmp
- %APPDATA%\dl-vbs.bmp
- %HOMEPATH%\My Documents\downloader.vbs
- %APPDATA%\downloader.vbs
- '62.#6.185.8':80
- '62.##.##5.8downloader.vbs':80
- 'wp#d':80
- 62.#6.185.8/bot/dl-vbs.bmp
- 62.#6.185.8/doit.php?v=#################
- wp#d/wpad.dat
- 62.##.##5.8downloader.vbs/
- DNS ASK 62.##.##5.8downloader.vbs
- DNS ASK on###eels.ru
- DNS ASK wp#d
- DNS ASK fb####x1.bget.ru