Техническая информация
- %TEMP%\misdbvfdddvie.exe
- %TEMP%\del1c128.bat
- <DRIVERS>\vscvkskewewfthew.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mouwe[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mouwe[1].gif
- 'ba####.cyad.co.kr':80
- ba####.cyad.co.kr/mouwe.gif
- DNS ASK ba####.cyad.co.kr