Техническая информация
- '%TEMP%\urcuw.exe'
- '%TEMP%\kqcpp.exe'
- '%TEMP%\urcuw.exe' (загружен из сети Интернет)
- %TEMP%\urcuw.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\cw2800[1].zip
- %TEMP%\kqcpp.exe
- 'hn###cor.com':80
- '94.##.247.202':80
- hn###cor.com/wp-content/uploads/2013/10/cw2800.zip
- 94.##.247.202/0708stat/CRNJEUFU/41/5/4/
- 94.##.247.202/0708stat/CRNJEUFU/0/51-SP2/0/
- 94.##.247.202/0708stat/CRNJEUFU/1/0/0/
- DNS ASK hn###cor.com