Technical Information
- file extensions
- <SYSTEM32>\attrib.exe +s +a +h +r "C:\RECYCLER"
- <SYSTEM32>\attrib.exe +s +a +h +r "%PROGRAM_FILES%"
- <SYSTEM32>\attrib.exe <Auxiliary element>
- <SYSTEM32>\attrib.exe +s +a +h +r "Z:\.."
- <SYSTEM32>\attrib.exe +s +a +h +r "%WINDIR%"
- <SYSTEM32>\reg.exe add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v HideFileExt /t reg_dword /d 00000001 /f
- %WINDIR%\explorer.exe <Current directory>"ЧЁМв"
- <SYSTEM32>\attrib.exe +s +a +h +r "C:\Documents and Settings"
- <SYSTEM32>\attrib.exe +s +a +h +r "C:\<Auxiliary name>"
- <SYSTEM32>\attrib.exe +s +a +h +r "C:\Far"
- C:\RECYCLER.exe
- <Auxiliary element>
- %WINDIR%.exe
- %PROGRAM_FILES%.exe
- C:\Documents and Settings.exe
- C:\Far.exe
- C:\<Auxiliary name>.exe
- 'www.wc##.com':80
- www.wc##.com/xin.rar
- DNS ASK www.wc##.com