Техническая информация
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Temp\rfavyirpel.js"
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1484
- %WINDIR%\temp\rfavyirpel.js
- %TEMP%\1098481.cvr
- 'av#.com':443
- 'bi###fender.com':443
- 'st####.thawte.com':80
- 'es##.com':443
- 'av#.com':443
- 'bi###fender.com':443
- 'es##.com':443
- DNS ASK av#.com
- DNS ASK bi###fender.com
- DNS ASK st####.thawte.com
- DNS ASK es##.com
- DNS ASK th###ifick.com