Техническая информация
- %TEMP%\ghwmonefdf.exe
- %TEMP%\del1a9c8.bat
- <DRIVERS>\mstmoneehew.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\monwe[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\monwe[1].gif
- 'www.gu##box.com':80
- www.gu##box.com/bgm/monwe.gif
- DNS ASK www.gu##box.com