Техническая информация
- %APPDATA%\WinSec.exe
- %TEMP%\SuperVirus (2).exe
- %TEMP%\SuperVirus (2).exe
- %APPDATA%\WinSec.exe
- 'su#####n.byethost11.com':80
- 'su#####roject.16mb.com':80
- su#####n.byethost11.com/login.php?id#########
- su#####roject.16mb.com/sm.php
- su#####n.byethost11.com/reg.php
- DNS ASK su#####n.byethost11.com
- DNS ASK su#####roject.16mb.com
- ClassName: 'Shell_TrayWnd' WindowName: ''