Техническая информация
- '%TEMP%\mytb_sky5.exe'
- '<SYSTEM32>\cmd.exe' /c \DelUS.bat
- %TEMP%\nsx4.tmp\SelfDelete.dll
- %TEMP%\nsx4.tmp\DLLWebCount.dll
- %TEMP%\nsz2.tmp\SelfDelete.dll
- C:\DelUS.bat
- %TEMP%\nsx4.tmp\System.dll
- %TEMP%\nsz2.tmp\stack.dll
- %TEMP%\nsz2.tmp\StringFind.dll
- %TEMP%\mytb_sky5.exe
- %TEMP%\nsz2.tmp\processes_second.dll
- %TEMP%\nsz2.tmp\SelfDelete.dll
- %TEMP%\nsz2.tmp\stack.dll
- %TEMP%\nsz2.tmp\StringFind.dll
- %TEMP%\nsz2.tmp\processes_second.dll
- %TEMP%\nsx4.tmp\DLLWebCount.dll
- %TEMP%\nsx4.tmp\SelfDelete.dll
- %TEMP%\nsx4.tmp\System.dll
- 'to####r.mypg.co.kr':80
- to####r.mypg.co.kr/mytb/nlog/mytb_count.php?ki#################
- DNS ASK to####r.mypg.co.kr