Техническая информация
- %WINDIR%\Temp\WINRAR.exe x -o+ -pzuozuo %WINDIR%\temp\1.zip 1.exe %WINDIR%\temp\
- %WINDIR%\Temp\WINRAR.exe (загружен из сети Интернет)
- <SYSTEM32>\ping.exe 127.0.0.1 -n 3
- <SYSTEM32>\wscript.exe "%WINDIR%\temp\1.vbs"
- %WINDIR%\Temp\1.vbs
- %WINDIR%\Temp\1.zip
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\da96fe89124dee6cd6be776746dd3190[1].jpg
- %WINDIR%\Temp\WINRAR.exe
- '25##p.com':80
- 'localhost':1035
- 25##p.com/wz/2013/03/19//da96fe89124dee6cd6be776746dd3190.jpg
- DNS ASK 25##p.com