Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\vmwere.lnk
- '%TEMP%\vmwere.exe'
- %TEMP%\kptl.doc
- %TEMP%\vmwere.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].htm
- 'www.mu###mori.com':80
- www.mu###mori.com/wp-includes/news/scripts/index.php
- DNS ASK www.mu###mori.com
- ClassName: 'WordPadClass' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''