Техническая информация
- %TEMP%\inshmad.bbbbcabeccab
- %TEMP%\nsb3c36.tmp\pp.dll
- %TEMP%\bbbbcabeccab.zip
- %TEMP%\nsb3c36.tmp\nsisunz.dll
- %TEMP%\inshmad.exe
- %TEMP%\91772604364.txt
- %TEMP%\inshmad.bbbbcabeccab
- %TEMP%\bbbbcabeccab.zip
- %TEMP%\91772604364.txt
- %TEMP%\nsb3c36.tmp\nsisunz.dll
- %TEMP%\nsb3c36.tmp\pp.dll
- %TEMP%\inshmad.exe в %TEMP%\bbbbcabeccab.exe
- %TEMP%\91772604364.txt
- DNS ASK in######r.ppdownload.com
- '%TEMP%\bbbbcabeccab.exe' /PID=5970 /SUBPID=0 /NETWORKID=0 /DISTID=21277 /CID=0 /PRODUCT_ID=0 /SERVER_URL=`omn7).enqoYgeco(oldmrfgh_a(bkm /CLICKID=sin1CJq_pIbo_vmuCRACGNfoh4jDoq_pBiIOMTIyLjE2NC43My4xODAoATDw_rihBQ.. /D1...
- '%WINDIR%\syswow64\wbem\wmic.exe' /output:%TEMP%\91772604364.txt bios get serialnumber (со скрытым окном)
- '%WINDIR%\syswow64\wbem\wmic.exe' /output:%TEMP%\91772604364.txt bios get version (со скрытым окном)