Техническая информация
- %ALLUSERSPROFILE%\Application Data\stat.exe Post xml "%TEMP%\NEW3.tmp"
- %ALLUSERSPROFILE%\Application Data\stat.exe
- %TEMP%\NEW3.tmp
- %TEMP%\NEW3.tmp.urlencode
- %TEMP%\wxb2.tmp
- %ALLUSERSPROFILE%\Application Data\Disk Clone Wizard Kit\resource\resource.dll
- %TEMP%\wxb1.tmp
- %ALLUSERSPROFILE%\Application Data\Disk Clone Wizard Kit\resource\vshadow.exe
- 'di####timate.com':80
- DNS ASK di####timate.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ConsoleWindowClass' WindowName: ''