Техническая информация
- %TEMP%\nzfavi.exe
- <SYSTEM32>\cmd.exe /c \DelUS.bat
- <SYSTEM32>\cmd.exe /c \fivi.bat
- C:\fivi.bat
- %HOMEPATH%\Favorites\OGAGE.url
- %TEMP%\nst2.tmp\DLLWebCount.dll
- C:\DelUS.bat
- %TEMP%\nst2.tmp\SelfDelete.dll
- %HOMEPATH%\Favorites\ЗПЗБЕ¬·ґґеДД.url
- %HOMEPATH%\Favorites\»х·Оїо јј»уА» ї©ґВ №®, Gё¶ДП.url
- %TEMP%\nzfavi.exe
- %HOMEPATH%\Favorites\јоЗОЕЧ¶уЗЗ, dnshop.url
- %HOMEPATH%\Favorites\јоЗО ЅєЖ®ё®Ж®, 11№ш°Ў.url
- %HOMEPATH%\Favorites\ґзЅЕАМ ГЈґВ ёрµз ЅєЕёАП, їБјЗ.url
- %TEMP%\nst2.tmp\SelfDelete.dll
- %TEMP%\nst2.tmp\DLLWebCount.dll
- %TEMP%\nzfavi.exe
- 'www.si####lper.co.kr':80
- www.si####lper.co.kr/count/bookmark/install.php?pi###
- DNS ASK www.si####lper.co.kr