Техническая информация
- '%TEMP%\47jo90kef9F.exe'
- '%TEMP%\87QW9K11u.exe' /in + /un /cb /rp /rf /mf /ai 14400 /ad 300 /pn "Costmin" /sf /ax /en 30 /path "#0\Supporter\Supporter.dll" /dn "Supporter 1.80" /prd "Supporter" /sn "Supporter" /iu "asp4Hwymrs/3mJLFHw4R5UlzU6zr8rFhAikmHwSKc9OBoLJwwkTLzzNRpintS5" /fd "Gh6N01262lmIMOQIKE1/I2zYi4chmo/jAS6HYR1puoJwEE" /fd "bJi6ysu1Dmtc4omjlhTJhdjDV1mOYR1Y9VPJI1aeJ2yS5cbn" /fd "nQ+lhabAjKZsPlhabcPC/UnCDkqKTrEhOw95H1agDG4dQj" /fd "V0Emjlh77H6KUDWYSUpxw7UtNMBoguj/UH94IJcUc7acQj" /pu "ADBQbcd8uYnPdYSUMOjULuDc6lZx9BVzJN2ARYGJI0WIvgmj38WIzZgUMLphn" /pid 5013
- '%TEMP%\1923490357\J0TvOiuA080z23o.exe'
- '%TEMP%\1923490357\Bho2h720Z2uHbwD.exe'
- '%TEMP%\1923490357\F324Z62z.exe'
- '%TEMP%\87QW9K11u.exe' (загружен из сети Интернет)
- '%TEMP%\47jo90kef9F.exe' (загружен из сети Интернет)
- %TEMP%\1923490357\OI8pYcAU5Q.ini
- %TEMP%\47jo90kef9F.exe
- %TEMP%\87QW9K11u.exe
- %TEMP%\1923490357\F324Z62z.exe
- %TEMP%\1923490357\J0TvOiuA080z23o.exe
- %TEMP%\1923490357\Bho2h720Z2uHbwD.exe
- %TEMP%\87QW9K11u.exe
- %TEMP%\47jo90kef9F.exe
- 'in#####collection.com':80
- 'su#####.costmin.info':80
- 'do#####d.costmin.info':80
- in#####collection.com/?HI######################################
- su#####.costmin.info/
- do#####d.costmin.info/?e=##########################################################################################################
- DNS ASK in#####collection.com
- DNS ASK su#####.costmin.info
- DNS ASK do#####d.costmin.info