Техническая информация
- %TEMP%\ghwsfrongpageffdf.exe
- %TEMP%\del242cb.bat
- <DRIVERS>\msfrongpageohew.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\morwe[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\morwe[1].gif
- 'www.gu##box.com':80
- www.gu##box.com/bgm/morwe.gif
- DNS ASK www.gu##box.com