Техническая информация
- %PROGRAM_FILES%\data\qq.exe
- %PROGRAM_FILES%\data\runvbs.exe
- <SYSTEM32>\wbem\scrcons.exe -Embedding
- <SYSTEM32>\wscript.exe "%PROGRAM_FILES%\data\run.vbs"
- %PROGRAM_FILES%\data\Help.chm
- %PROGRAM_FILES%\data\runvbs.exe
- %PROGRAM_FILES%\data\qq.exe
- %PROGRAM_FILES%\data\run.vbs
- <SYSTEM32>\wbem\Logs\wbemess.lo_
- %PROGRAM_FILES%\data\run.vbs
- 'yh####921.3322.org':8000
- DNS ASK yh####921.3322.org