Техническая информация
- '%TEMP%\wyrzc.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\wyrzc.exe
- %TEMP%\uttD1FC.tmp
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\PerfStringBackup.TMP
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\img12[1].pne
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\img12[1].pne
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\img12[1].pne
- 'ns###istian.org':80
- 'cr####ownimpact.com':80
- '20#.#53.35.133':13821
- ns###istian.org/docs/img12.pne
- cr####ownimpact.com/wp-includes/images/img12.pne
- DNS ASK ns###istian.org
- DNS ASK cr####ownimpact.com