Техническая информация
- '%WINDIR%\Web\TTMap00000.exe'
- '<SYSTEM32>\attrib.exe' +s +h "%WINDIR%\web\TTMap00000.exe"
- '<SYSTEM32>\taskkill.exe' /f /im qq.exe
- '<SYSTEM32>\cmd.exe' /c %WINDIR%\web\705.5475.bat
- '<SYSTEM32>\ping.exe' 127.1
- %WINDIR%\Web\TTMap00000.exe
- %WINDIR%\Web\705.5475.bat
- %WINDIR%\Web\TTMap00000.exe
- %TEMP%\~DF18B6.tmp
- ClassName: '(null)' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'QQ????'
- ClassName: '(null)' WindowName: 'QQ2009'