Техническая информация
- %TEMP%\waterproof.mdb
- %TEMP%\rid.mdb
- %TEMP%\thumbnail.mdb
- %TEMP%\suicide.mdb
- %TEMP%\compare.mdb
- %TEMP%\biography.mdb
- %TEMP%\advisor.mdb
- %TEMP%\firefox.mdb
- %TEMP%\degree.mdb
- %TEMP%\compare.mdb.bat
- %TEMP%\tits
- %TEMP%\proc
- %TEMP%\accident
- %TEMP%\bukkake
- %TEMP%\triangle
- %TEMP%\immediate
- %TEMP%\fresh
- %TEMP%\animated
- %TEMP%\wallpapers
- %TEMP%\nails
- %TEMP%\511026\bottle.com
- %TEMP%\511026\f
- %TEMP%\511026\f
- 'co##############e-chains.prod.autograph.services.mozaws.net':443
- DNS ASK co##############e-chains.prod.autograph.services.mozaws.net
- DNS ASK HY##############tFARvEHNaFfH.HYZbOvxHkUEbONdTtFARvEHNaFfH
- '%TEMP%\511026\bottle.com' f
- '%WINDIR%\syswow64\cmd.exe' /c copy Compare.mdb Compare.mdb.bat & Compare.mdb.bat (со скрытым окном)
- '%WINDIR%\syswow64\tasklist.exe'
- '%WINDIR%\syswow64\findstr.exe' /I "opssvc wrsa"
- '%WINDIR%\syswow64\findstr.exe' "nsWscSvc ekrn bdservicehost SophosHealth AvastUI AVGUI & if not errorlevel 1 Set bBRaUkD=AutoIt3.exe & Set rayvGDPBPROyuKDOkizBcSEBpBqu=.a3x & Set rpdzC=300
- '%WINDIR%\syswow64\extrac32.exe' /Y Thumbnail.mdb *.*
- '%WINDIR%\syswow64\findstr.exe' /V "Doing" Tits
- '%WINDIR%\syswow64\choice.exe' /d n /t 5