92.63.197.190(Ruski Email Worm Hosted In AS60307 HVFOPSERVER-AS, UA)

Dangerous worm spreading through mails probably our old friend snk. Defense EvasionObscures a file’s origin : Tries to delete zone identifier of file “C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\pe.exe”. Tries to delete zone identifier of file “C:\Windows\230531292821781\svchost.exe”. Tries to delete zone identifier of file “C:\Users\5P5NRG~1\AppData\Local\Temp\1762129910.exe”. Tries to delete zone identifier of file “C:\Users\5P5NRG~1\AppData\Local\Temp\2759815991.exe”. Tries to delete zone identifier of 92.63.197.190(Ruski Email Worm Hosted In AS60307 HVFOPSERVER-AS, UA)