Техническая информация
- '%TEMP%\vrkqc.exe'
- '%TEMP%\ritav.exe'
- '%TEMP%\vrkqc.exe' (загружен из сети Интернет)
- %TEMP%\vrkqc.exe
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\images[1].rar
- %TEMP%\ritav.exe
- 'ow####randall.com':80
- '94.##.247.202':80
- ow####randall.com/images/images.rar
- 94.##.247.202/3107t1/BVNSEUHJ/41/5/4/
- 94.##.247.202/3107t1/BVNSEUHJ/0/61-SP1/0/
- 94.##.247.202/3107t1/BVNSEUHJ/1/0/0/
- DNS ASK ow####randall.com