Техническая информация
- %TEMP%\~eam240371.cmd
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\_gt[1].php
- %TEMP%\~eam240371.cmd
- %TEMP%\~eam240371.cmd
- 'wi###reetour.me':80
- wi###reetour.me/pan/_gt.php?id#######
- DNS ASK wi###reetour.me