Техническая информация
- '%TEMP%\xnaxl.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\xnaxl.exe
- %TEMP%\utt4566.tmp
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\PerfStringBackup.TMP
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\unit22[1].pne
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\unit22[1].pne
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\unit22[1].pne
- 'al##ff.com':80
- 'mo#######ki.seometria.com.ua':80
- '20#.#53.35.133':27132
- al##ff.com/wp-includes/images/unit22.pne
- mo#######ki.seometria.com.ua/wp-includes/images/unit22.pne
- DNS ASK al##ff.com
- DNS ASK mo#######ki.seometria.com.ua