Техническая информация
- %TEMP%\Install_Flash_Player.exe nR8fvDrK5gE
- <LS_APPDATA>\Microsoft\Windows\kldfhlt.exe
- <SYSTEM32>\ipconfig.exe /renew
- <SYSTEM32>\svchost.exe
- %TEMP%\Install_Flash_Player.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\test[1].php
- <LS_APPDATA>\Microsoft\Windows\kldfhlt.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\test[1].php
- '1.###rtylax.in':80
- 1.###rtylax.in/js/test.php?id##
- DNS ASK 1.###rtylax.in
- '<IP-адрес в локальной сети>':1035