Техническая информация
- '<SYSTEM32>\cscript.exe' "%TEMP%\4.tmp.vbs"
- '<SYSTEM32>\cscript.exe' "%TEMP%\3.tmp.vbs"
- '<LS_APPDATA>\SearchIndexer.exe'
- [<HKCU>\Software\Microsoft\Internet Account Manager]
- [<HKCU>\Software\Microsoft\Internet Account Manager\Accounts]
- <LS_APPDATA>\SearchIndexer.exe
- %TEMP%\4.tmp.vbs
- %TEMP%\3.tmp.vbs
- <LS_APPDATA>\SearchIndexer.exe
- %TEMP%\4.tmp.vbs
- %TEMP%\3.tmp.vbs
- 'po####.interia.pl':465
- DNS ASK po####.interia.pl