Техническая информация
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\wewt0.bat" "
- %TEMP%\wewt0.bat
- %TEMP%\xrg0.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ifgmzdjl[1].php
- '78.##7.143.246':80
- 78.##7.143.246/image/qsdyuioff/pubenmgfuy/ifgmzdjl.php?pa##############