Техническая информация
- %APPDATA%\Tool-Store-Stealer\Update.exe
- ICQ.exe
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trillian]
- [<HKLM>\SOFTWARE\Miranda]
- %APPDATA%\Tool-Store-Stealer\Update.exe
- '11#.#11.111.2':80
- 'ch####p.dyndns.org':80
- ch####p.dyndns.org/
- 11#.#11.111.2//tool-store.info/Directory/Panel/creater.php
- DNS ASK fo#####mple.localdomain
- DNS ASK ch####p.dyndns.org