Техническая информация
- '%TEMP%\BuenoSearchTB.exe' -mhp -mnt -mds -mtb -affilid=128520 -rt
- '%TEMP%\Re-Markable_2040-4041.exe' /javie5
- '%TEMP%\BuenoSearchTB.exe' (загружен из сети Интернет)
- '%TEMP%\Re-Markable_2040-4041.exe' (загружен из сети Интернет)
- %TEMP%\nsq3.tmp\inetc.dll
- %TEMP%\Re-Markable_2040-4041.exe
- %TEMP%\BuenoSearchTB.exe
- %TEMP%\nsq3.tmp\System.dll
- %TEMP%\nsv2.tmp
- %TEMP%\ezmzMsg.dll
- %TEMP%\nsq3.tmp\CLR.dll
- 'pa###.dtsdce.com':80
- 'dl.###-services.com':80
- 'wp#d':80
- 'ev###.#zwebservices.net':80
- pa###.dtsdce.com/apps/dist/Re-Markable_2040-4041.exe
- dl.###-services.com/site/files/prtnrp/BuenoSearch/BuenoSearchTB.exe
- wp#d/wpad.dat
- ev###.#zwebservices.net/getcc/
- ev###.#zwebservices.net/event/
- DNS ASK pa###.dtsdce.com
- DNS ASK dl.###-services.com
- DNS ASK wp#d
- DNS ASK ev###.#zwebservices.net