Техническая информация
- %TEMP%\del1eac8.bat
- %TEMP%\vhostqhouseffauiew.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1385793699[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1385793699[1].gif
- <SYSTEM32>\PerfStringBackup.TMP
- 'cd#.###ge3.yanolja.com':80
- cd#.###ge3.yanolja.com/site/imageFile/uploadFile/editorImagesYanolja/20131130/1385793699.gif
- DNS ASK cd#.###ge3.yanolja.com