Техническая информация
- <SYSTEM32>\cmd.exe /c _deleteme.bat
- <Текущая директория>\_deleteme.bat
- 'www.yk##.com.cn':80
- 'www.5t##.com':80
- www.yk##.com.cn/url.txt
- www.5t##.com/5f5tlmadmin/co5tu5mnt.asp?ma#######
- DNS ASK www.yk##.com.cn
- DNS ASK www.5t##.com
- ClassName: '' WindowName: '???????????? V1.0 - [F.S.T]Kendy'
- ClassName: '' WindowName: '????????????????'
- ClassName: '' WindowName: 'Temporary Internet Files'
- ClassName: '' WindowName: '%HOMEPATH%\Local Settings\Temporary Internet Files'
- ClassName: '' WindowName: 'IP????'
- ClassName: '' WindowName: 'MiniSniffer'
- ClassName: '' WindowName: '?????????????? 2005 For 2000.XP'
- ClassName: '' WindowName: 'WSock Expert v0.6 beta 1'