Техническая информация
- '%TEMP%\iybkc.exe'
- '%TEMP%\slpxl.exe'
- '%TEMP%\tzquw.exe'
- '%TEMP%\iybkc.exe' (загружен из сети Интернет)
- '%TEMP%\slpxl.exe' (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\h76id30[1].zip
- %TEMP%\iybkc.exe
- %TEMP%\slpxl.exe
- %TEMP%\tzquw.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\11s1[1].zip
- 'fl####ss.d-webs.com':80
- 'po####tengoweb.com':80
- '94.##.247.202':80
- 94.##.247.202/1108us1/CRNJEUFU/41/5/4/
- fl####ss.d-webs.com/images/airlines-logo/h76id30.zip
- 94.##.247.202/1108h/CRNJEUFU/41/5/4/
- po####tengoweb.com/css/11s1.zip
- 94.##.247.202/1108us1/CRNJEUFU/0/51-SP2/0/
- 94.##.247.202/1108us1/CRNJEUFU/1/0/0/
- 94.##.247.202/1108h/CRNJEUFU/1/0/0/
- DNS ASK fl####ss.d-webs.com
- DNS ASK po####tengoweb.com