Техническая информация
- "%TEMP%\wl0910198.exe" (загружен из сети Интернет)
- %TEMP%\CoralExplorer_200303.exe
- %TEMP%\wl0910198.exe
- %TEMP%\nss2.tmp\NSISdl.dll
- 'do#####d.shanhu99.com':80
- 'do##.#mstock.com.cn':80
- do#####d.shanhu99.com/down/CoralExplorer_200303.exe
- do##.#mstock.com.cn/wl0910198.exe
- DNS ASK do#####d.shanhu99.com
- DNS ASK do##.#mstock.com.cn