Техническая информация
- '<SYSTEM32>\conhost.exe'
- %WINDIR%\Temp\MPTelemetrySubmit\client_manifest.txt
- %WINDIR%\Temp\MPTelemetrySubmit\watson_manifest.txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\BOWDBRP7\pegar_BL2[1].php
- %APPDATA%\Roaming\listablX2.txt
- 'te#####t60.dyndns.org':80
- te#####t60.dyndns.org/pegar_BL2.php?cm#######
- DNS ASK wa####.microsoft.com
- DNS ASK te#####t60.dyndns.org
- '22#.0.0.252':5355