Техническая информация
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "%TEMP%\A9R1u87ejd_iyff24_h4.tmp\remittance 0621.doc"
- %TEMP%\a9r1u87ejd_iyff24_h4.tmp\remittance 0621.doc
- %APPDATA%\new.exe
- 'en###chie.net':80
- http://en###chie.net/zite/new.exe
- http://en###chie.net/cgi-sys/suspendedpage.cgi
- DNS ASK en###chie.net
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding