Техническая информация
- '%TEMP%\UpdateFlashPlayer_cb3d6024.exe'
- '%TEMP%\UpdateFlashPlayer_cb3d6024.exe' (загружен из сети Интернет)
- %WINDIR%\Explorer.EXE
- %TEMP%\tmpf17888e5.bat
- %TEMP%\UpdateFlashPlayer_cb3d6024.exe
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\3310a4fa6cb9c60504498d7eea986fc2_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mod_smartslider2[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1480[1]
- 'ga###itbe.com':80
- 'le##tbo.com':80
- ga###itbe.com/php-jshoping/mod_smartslider2/
- le##tbo.com/catalog/1480
- DNS ASK ga###itbe.com
- DNS ASK le##tbo.com