Техническая информация
- '<SYSTEM32>\wscript.exe' "%TEMP%\delay.vbs"
- '<SYSTEM32>\cmd.exe' /c c:\zz.bat
- '<SYSTEM32>\services.exe'
- <SYSTEM32>\services.exe
- %TEMP%\2d306.tmp
- %TEMP%\2db06.tmp
- %TEMP%\Da.txt
- C:\zz.bat
- %TEMP%\delay.vbs
- %TEMP%\2a1b4.tmp
- %TEMP%\2d306.tmp
- %TEMP%\2db06.tmp
- %TEMP%\2a1b4.tmp
- %TEMP%\delay.vbs
- 'www.2p##.org':80
- 'localhost':1036
- www.2p##.org/1.txt
- DNS ASK hi.##idu.com
- DNS ASK www.2p##.org