Техническая информация
- '%ProgramFiles%\windows nt\accessories\wordpad.exe'
- '<SYSTEM32>\xcopy.exe' /Y /C /Q <SYSTEM32>\ie4uinit.exe "%LOCALAPPDATA%\Temp"
- '%TEMP%\ie4uinit.exe' -basesettings
- %TEMP%\ieuinit.inf
- %TEMP%\ie4uinit.exe
- 'sf#####.sophia-pascal.com':80
- http://sf#####.sophia-pascal.com/rockandroll
- DNS ASK sf#####.sophia-pascal.com
- ClassName: 'WordPadClass' WindowName: ''