Техническая информация
- %TEMP%\tmp1.tmp
- %TEMP%\tmp2.tmp
- %WINDIR%\ME\ГОчКФґВл.ico
- %WINDIR%\SkinH_EL.dll
- %WINDIR%\ME\ГОчКДЈїй.ico
- %WINDIR%\ME\ГОчКФґВл.ico
- %WINDIR%\ME\ГОчКДЈїй.ico
- %WINDIR%\SkinH_EL.dll
- %TEMP%\tmp1.tmp
- 'ft#.#ree3v.net':21
- 'localhost':1038
- DNS ASK ft#.#ree3v.net
- '<SYSTEM32>\net.exe' user "%USERNAME%" "LL666888"
- '<SYSTEM32>\net1.exe' user "%USERNAME%" "LL666888"
- '<SYSTEM32>\cmd.exe' /c net user "%USERNAME%" "LL666888"
- '<SYSTEM32>\cmd.exe' /c wmic useraccount where name='%USERNAME%' call Rename "ПлЦЄµАГЬВл+ИєЈє522203912єу№ыУЪ±ѕИєОЮ№Ш±ѕИєОЮ№Ш"