Техническая информация
- %TEMP%\mismoonnxie.exe
- %TEMP%\del406d2.bat
- <DRIVERS>\msflimoonntphew.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\moome[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\moome[1].gif
- 'www.ca###et.co.kr':80
- www.ca###et.co.kr/img/moome.gif
- DNS ASK www.ca###et.co.kr