Техническая информация
- %WINDIR%\Tasks\Internrt_Explorer_Updates.job
- '%TEMP%\hidcon.exe' start.cmd
- '%TEMP%\ddos.exe' -p1234567890_
- '<SYSTEM32>\schtasks.exe' /Create /TN Internrt_Explorer_Updates /TR "%APPDATA%\Updates\explorer.exe" /SC MINUTE /mo 10 /ru "System"
- '<SYSTEM32>\find.exe' "Microsoft Windows XP"
- '<SYSTEM32>\cmd.exe' /c start.cmd
- %TEMP%\start.cmd
- %APPDATA%\Updates\explorer.exe
- %TEMP%\hidcon.exe
- %TEMP%\ddos.exe
- %TEMP%\explorer.exe
- %TEMP%\hidcon.exe
- %TEMP%\start.cmd
- %TEMP%\ddos.exe
- %TEMP%\explorer.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'