Техническая информация
- %TEMP%\ixp000.tmp\templa~1.exe
- %TEMP%\7zipsfx.000\h_templates.exe
- %TEMP%\nsm314d.tmp\inetload.dll
- %TEMP%\nsm314d.tmp\inetload.dll
- %TEMP%\7zipsfx.000\h_templates.exe
- %TEMP%\ixp000.tmp\templa~1.exe
- http://www.fl###rect.com/downloadfile.php?af############
- DNS ASK fl###rect.com
- '%TEMP%\ixp000.tmp\templa~1.exe'
- '%TEMP%\7zipsfx.000\h_templates.exe' /S
- '%TEMP%\ixp000.tmp\templa~1.exe' ' (со скрытым окном)