Техническая информация
- '<SYSTEM32>\wscript.exe' //e:vbscript //b %APPDATA%\Microsoft\Templates\1589989024.xml
- %APPDATA%\microsoft\templates\1589989024.xml
- %APPDATA%\microsoft\templates\~$89989024.xml
- %APPDATA%\microsoft\templates\~$89989024.xml
- 'as####.#edianewsonline.com':80
- http://as####.#edianewsonline.com/good/luck/flavor/list.php?qu#####
- DNS ASK as####.#edianewsonline.com