Техническая информация
- %PROGRAM_FILES%\WINDOWS.INI "%PROGRAM_FILES%\WINDOWSS.INI" main
- %TEMP%\1.exe
- <SYSTEM32>\cmd.exe /c ""%TEMP%\7ZSfx000.cmd" "
- <SYSTEM32>\cmd.exe /c afc9fe2f418b00a0.bat
- %PROGRAM_FILES%\WINDOWS.INI
- %TEMP%\afc9fe2f418b00a0.bat
- %TEMP%\7ZSfx000.cmd
- %TEMP%\1.exe
- %PROGRAM_FILES%\WINDOWSS.INI
- %PROGRAM_FILES%\temp0\QQ.exe
- %TEMP%\7ZSfx000.cmd
- %TEMP%\1.exe
- 'xx####e.gicp.net':777
- DNS ASK xx####e.gicp.net