Техническая информация
- <SYSTEM32>\svchost.exe
- %TEMP%\camp23.dat
- %APPDATA%\D25635.exe
- %TEMP%\Temporary Directory 1 for mwxxe.zip\camp23.dat
- %TEMP%\aut1.tmp
- %TEMP%\mwxxe.zip
- %APPDATA%\D25635.exe
- %TEMP%\aut1.tmp
- '20#.#6.232.182':80
- 20#.#6.232.182/
- DNS ASK windowsupdate.microsoft.com