Техническая информация
- Центр обеспечения безопасности (Security Center)
- '%TEMP%\civywk4jmmcu.exe' -r 28209 tcp
- <SYSTEM32>\4bna\cfg
- %TEMP%\civywk4jmmcu.exe
- <SYSTEM32>\4bna\por
- <SYSTEM32>\4bna\run
- <SYSTEM32>\4bna\tst
- <SYSTEM32>\4bna\etc
- <SYSTEM32>\4bna\rng
- %TEMP%\civywk4jmmcu.exe
- <DRIVERS>\etc\hosts
- 'ji####herenow.com':80
- 'en#####paintshop.com':80
- 'sp###aguga.com':80
- 'el#####arimagine.com':80
- ji####herenow.com/forum/search.php?me########################################
- en#####paintshop.com/forum/search.php?me########################################
- sp###aguga.com/forum/search.php?me########################################
- el#####arimagine.com/forum/search.php?me########################################
- DNS ASK go#####everytime.net
- DNS ASK sp###aguga.net
- DNS ASK ja###uter.com
- DNS ASK ji####herenow.net
- DNS ASK ja###uter.net
- DNS ASK el#####arimagine.net
- DNS ASK el#####arimagine.com
- DNS ASK sp###aguga.com
- DNS ASK ji####herenow.com
- DNS ASK go#####everytime.com
- DNS ASK en#####paintshop.com
- '23#.#55.255.250':1900