Техническая информация
- '%TEMP%\ncdje.exe'
- %TEMP%\ncdje.exe
- %TEMP%\utt141A.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ypages[1].pdf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ypages[1].pdf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ypages[1].pdf
- 'cr##28.com':80
- 'we###lclub.com':80
- '18#.#65.214.6':14587
- cr##28.com/images/ypages.pdf
- we###lclub.com/whuracan/js/ypages.pdf
- DNS ASK cr##28.com
- DNS ASK we###lclub.com