Техническая информация
- '%TEMP%\0ckfdj0l.ewa.exe'
- '%TEMP%\0ckfdj0l.ewa.exe' (загружен из сети Интернет)
- %TEMP%\0ckfdj0l.ewa.exe
- 'www.up####-srv3.info':80
- 'wp#d':80
- www.up####-srv3.info/get/.eJwdi00KgCAQRu_yrWfRVCZ5mTA0iSRFg6Do7k1t388Nm_O0OphubLglHLZuMHARhPzxttFMuNLu_2wYteKOsO71sDFOS7ShwnDPiiAoeLlzSU7-uaSz-iJaPy9eXR-9.MnuvPA9wet0B3H6pcqArnhgYHfY
- wp#d/wpad.dat
- DNS ASK www.up####-srv3.info
- DNS ASK wp#d