Техническая информация
- '%TEMP%\setup.exe' /RBD
- '%TEMP%\setup.exe' (загружен из сети Интернет)
- %TEMP%\setup.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\get_setup_url[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\get_setup_url[1]
- 'de#.###edbrowsing.com':80
- de#.###edbrowsing.com/get_setup_url/
- DNS ASK de#.###edbrowsing.com