Техническая информация
- %TEMP%\misdaffvvvie.exe
- %TEMP%\del3c71a.bat
- <DRIVERS>\vscvkhatyuensfthew.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\momute[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\momute[1].gif
- 'ba####.cyad.co.kr':80
- ba####.cyad.co.kr/momute.gif
- DNS ASK ba####.cyad.co.kr