Техническая информация
- '%TEMP%\rfz_Bo2.exe'
- %TEMP%\rfz_Bo2.exe
- %TEMP%\tmp-4554.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\nuts12[1].pdf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\nuts12[1].pdf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\nuts12[1].pdf
- 'ne#####untaintravel.com':80
- 'cr##rec.com':80
- '20#.#53.35.133':55345
- ne#####untaintravel.com/wp-includes/css/nuts12.pdf
- cr##rec.com/mandoc/nuts12.pdf
- DNS ASK ne#####untaintravel.com
- DNS ASK cr##rec.com