Техническая информация
- '<SYSTEM32>\wscript.exe' %TEMP%\\t_154421.vbs
- '<SYSTEM32>\wscript.exe' %TEMP%\\t_154781.vbs
- '<SYSTEM32>\wscript.exe' %TEMP%\\t_155312.vbs
- '<SYSTEM32>\wscript.exe' %TEMP%\\t_153859.vbs
- '%TEMP%\msdevs.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\Del.bat" "
- '<SYSTEM32>\ping.exe' -n 3 127.0.0.1
- %TEMP%\t_154421.vbs
- %TEMP%\t_154781.vbs
- %TEMP%\t_155312.vbs
- %TEMP%\t_153859.vbs
- %TEMP%\msdevs.exe
- %TEMP%\Del.dat
- %TEMP%\Del.bat
- %TEMP%\Del.dat
- 'vi#.#aqio.com':9999
- DNS ASK vi#.#aqio.com
- ClassName: 'Shell_TrayWnd' WindowName: ''