Техническая информация
- %TEMP%\topst.exe "<SYSTEM32>\pop2.vbs" "%TEMP%\txcc\wxtop.nqm"
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://wW#.#5081.net/2.htm
- %TEMP%\txcc\wxtop.nqm
- %TEMP%\topst.exe
- <SYSTEM32>\pop2.vbs
- %TEMP%\nst2.tmp
- <SYSTEM32>\taoY.ico
- 'localhost':1036
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''