Техническая информация
- '' (загружен из сети Интернет)
- 'C:\users\public\vbc.exe'
- C:\users\public\vbc.exe
- '18#.#9.10.125':80
- 'gu###medya.com':80
- http://18#.#9.10.125/247/vbc.exe
- http://gu###medya.com/loader/uploads/C23_Chlsgffk.bmp
- DNS ASK gu###medya.com
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' Start-Sleep -Seconds 9;Start-Sleep -Seconds 9;