Техническая информация
- '%WINDIR%\17PHolmes1739.exe' 61A847B5BBF72813359831466188719AB689201522886B092CBD44BD8689220221DD3257
- '%WINDIR%\17PHolmes1739.exe' (загружен из сети Интернет)
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\un.bat" "
- %TEMP%\un.bat
- %WINDIR%\17PHolmes1739.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\17PHolmes[1].cmt
- 'ym#.###39.wrs.mcboo.com':80
- ym#.###39.wrs.mcboo.com/17PHolmes.cmt
- DNS ASK ym#.###39.wrs.mcboo.com