Техническая информация
- '' (загружен из сети Интернет)
- '%APPDATA%\wlanext.exe'
- iqqsmqf.exe
- %APPDATA%\wlanext.exe
- %TEMP%\xtlzwvurz.k
- %TEMP%\iqqsmqf.exe
- '14#.#28.29.227':80
- http://14#.#28.29.227/microsoftunderstandwhyneedtodeleteentirehistorycachecookieverything.Doc
- http://14#.#28.29.227/myexploitwednesdayyy.exe
- '%TEMP%\iqqsmqf.exe'
- '%ProgramFiles%\microsoft office\office14\winword.exe' -Embedding
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding