Техническая информация
- <SYSTEM32>\cmd.exe /c <SYSTEM32>\deleteself.bat
- <SYSTEM32>\deleteself.bat
- %WINDIR%\Temp\WUP2.tmp
- %WINDIR%\Temp\WUP1.tmp
- <SYSTEM32>\wbelnt.ini
- 'mo#.#sc2.net':80
- mo#.#sc2.net/files/30lightf/lightf.exe
- mo#.#sc2.net/files/30lightf/wbelnt.ini
- DNS ASK mo#.#sc2.net
- ClassName: 'MS_WINHELP' WindowName: ''