Техническая информация
- %PROGRAM_FILES%\iexplore\iexplore.exe
- <SYSTEM32>\cmd.exe /c """%TEMP%\_rem_.bat"" "
- %TEMP%\_rem_.bat
- %PROGRAM_FILES%\iexplore\iexplore.dll
- %TEMP%\cybix.dll
- C:\woot.wink
- %PROGRAM_FILES%\iexplore\iexplore.exe
- C:\woot.wink
- 'ph###.bounceme.net':3177
- DNS ASK ph###.bounceme.net