Техническая информация
- '%TEMP%\gonlf.exe'
- %TEMP%\gonlf.exe
- %TEMP%\utt1F69.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\guffiaa[1].pne
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\guffiaa[1].pne
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\guffiaa[1].pne
- 'nd###ard.org':80
- 'ne##smi.com':80
- '20#.#53.35.133':14356
- nd###ard.org/images/guffiaa.pne
- ne##smi.com/images/guffiaa.pne
- DNS ASK nd###ard.org
- DNS ASK ne##smi.com