Техническая информация
- %TEMP%\del22725.bat
- %TEMP%\decmain7sefvsiew.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1384682183[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1384682183[1].gif
- 'cd#.###ge3.yanolja.com':80
- cd#.###ge3.yanolja.com/site/imageFile/uploadFile/editorImagesYanolja/20131117/1384682183.gif
- DNS ASK cd#.###ge3.yanolja.com