Техническая информация
- %TEMP%\del54385.bat
- %TEMP%\msfwgsdtpie.exe
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\less7[1].gif
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\less7[1].gif
- 'ph##d.com':80
- ph##d.com/images/bbs/less7.gif
- DNS ASK ph##d.com