Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\sgvhbdrfxtnzbuz] 'Start' = '00000002'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\getcfg[1].htm
- %TEMP%\DAT1.tmp.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\getcfg[1].htm
- 'ma##.aol.com':25
- '74.##5.232.51':25
- 'ma##.mail.com':25
- '62.##2.73.202':80
- 'ma##.#otmail.com':25
- '67.##5.160.76':25
- 62.##2.73.202/552/getcfg.php
- DNS ASK google.com
- DNS ASK ma##.aol.com
- DNS ASK ma##.google.com
- DNS ASK ma##.mail.com
- DNS ASK ma##.com
- DNS ASK ma##.#otmail.com
- DNS ASK ho##ail.com
- DNS ASK ya##o.com
- DNS ASK ao#.com
- DNS ASK ma##.yahoo.com