Техническая информация
- %TEMP%\mghostygghvie.exe
- %TEMP%\del36850.bat
- <DRIVERS>\msfdghhjophew.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\moime[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\moime[1].gif
- 'www.ca###et.co.kr':80
- www.ca###et.co.kr/img/moime.gif
- DNS ASK www.ca###et.co.kr