Техническая информация
- '%TEMP%\kilf1.exe'
- '%TEMP%\budha.exe'
- '%TEMP%\kilf1.exe' (загружен из сети Интернет)
- %TEMP%\kilf1.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\pdf[1].enc
- %TEMP%\budha.exe
- 'dc####rvices.com':80
- dc####rvices.com/images/stories/slides/pdf.enc
- DNS ASK dc####rvices.com