Техническая информация
- '%TEMP%\7gibtT.exe'
- '%TEMP%\MWo47S2K5E.exe' /in + /un /cb /rp /rf /mf /ai 14400 /ad 300 /pn "Costmin" /sf /ax /en 30 /path "#0\Supporter\Supporter.dll" /dn "Supporter 1.80" /prd "Supporter" /sn "Supporter" /iu "asp4Hwymrs/3mJLFHw4R5UlzU6zr8rFhAikmHwSKc9OBoLJwwkTLzzNRpintS5" /fd "Gh6N01262lmIMOQIKE1/I2zYi4chmo/jAS6HYR1puoJwEE" /fd "bJi6ysu1Dmtc4omjlhTJhdjDV1mOYR1Y9VPJI1aeJ2yS5cbn" /fd "nQ+lhabAjKZsPlhabcPC/UnCDkqKTrEhOw95H1agDG4dQj" /fd "V0Emjlh77H6KUDWYSUpxw7UtNMBoguj/UH94IJcUc7acQj" /pu "ADBQbcd8uYnPdYSUMOjULuDc6lZx9BVzJN2ARYGJI0WIvgmj38WIzZgUMLphn" /pid 5035
- '%TEMP%\713248876\pGMSqH3aS0.exe'
- '%TEMP%\713248876\JQdkw2p6IbTqB5.exe'
- '%TEMP%\713248876\Ob1i5Mt7Z2F.exe'
- '%TEMP%\MWo47S2K5E.exe' (загружен из сети Интернет)
- '%TEMP%\7gibtT.exe' (загружен из сети Интернет)
- %TEMP%\713248876\UF747754m8tWAZ.ini
- %TEMP%\7gibtT.exe
- %TEMP%\MWo47S2K5E.exe
- %TEMP%\713248876\JQdkw2p6IbTqB5.exe
- %TEMP%\713248876\Ob1i5Mt7Z2F.exe
- %TEMP%\713248876\pGMSqH3aS0.exe
- %TEMP%\713248876\Ob1i5Mt7Z2F.exe
- %TEMP%\713248876\pGMSqH3aS0.exe
- %TEMP%\713248876\UF747754m8tWAZ.ini
- %TEMP%\7gibtT.exe
- %TEMP%\MWo47S2K5E.exe
- %TEMP%\713248876\JQdkw2p6IbTqB5.exe
- 'in#####collection.com':80
- 'su#####.costmin.info':80
- 'do#####d.costmin.info':80
- in#####collection.com/?HI#######################################
- su#####.costmin.info/
- do#####d.costmin.info/?e=########################################################################################################
- DNS ASK in#####collection.com
- DNS ASK su#####.costmin.info
- DNS ASK do#####d.costmin.info