Техническая информация
- '<SYSTEM32>\cmd.exe' /c <Текущая директория>\$$30689.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\msger608[1].txt
- <Текущая директория>\$$30689.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\msger608[1].txt
- %TEMP%\VXWKHKLRPU.zbc
- %TEMP%\VXWKHKLRPU.zbc
- 'db#.#wads.cn':80
- 'localhost':1036
- db#.#wads.cn/Jusou/ins/msger608.txt
- DNS ASK db#.#wads.cn