Техническая информация
- <SYSTEM32>\cmd.exe /c """%TEMP%\Del.bat"" "
- %TEMP%\Del.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\count[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\count[1].asp
- 'pp###.#16.19821122.com':80
- pp###.#16.19821122.com/count.asp
- DNS ASK pp###.#16.19821122.com