Техническая информация
- '<SYSTEM32>\cmd.exe' /c \DelUS.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\uinfoc[1].php
- C:\DelUS.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\c[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\c[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\uinfo[1].php
- 'u.####pangpang.com':80
- u.####pangpang.com/a/bl/c.php?i=###
- u.####pangpang.com/a/ib/uinfoc.php
- u.####pangpang.com/a/bl/c.php?i=##
- u.####pangpang.com/a/ib/uinfo.php
- DNS ASK u.####pangpang.com
- ClassName: 'Shell_TrayWnd' WindowName: ''