Техническая информация
- '<SYSTEM32>\cmd.exe' /c <Текущая директория>\a.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ZeWeather868[1].exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\yiqmon868[1].exe
- <Текущая директория>\a.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Funshion868[1].exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\etinfr868[1].exe
- %TEMP%\~DF1900.tmp
- 'do##.49558.cn':80
- 'localhost':1036
- do##.49558.cn/soft/ZeWeather868.exe
- do##.49558.cn/soft/yiqmon868.exe
- do##.49558.cn/soft/Funshion868.exe
- do##.49558.cn/soft/etinfr868.exe
- DNS ASK do##.49558.cn