Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\WINWORD.lnk
- %HOMEPATH%\Start Menu\Programs\Microsoft Office\BIN\WINWORD.EXE
- 'www.km##3.com':80
- 'www.km##yc.com':80
- 'au######on.whatismyip.com':80
- 'www.st###hoof.com':80
- www.st###hoof.com/ForZRLnk2z/bak.txt
- www.km##3.com/ForZRLnk2z/hostlist.txt
- www.km##3.com/ForZRLnk2z/dizhi.gif
- www.km##yc.com/some/edih.txt
- au######on.whatismyip.com/n09230945.asp
- www.st###hoof.com/some/edih.txt
- www.km##3.com/some/edih.txt
- DNS ASK www.km##3.com
- DNS ASK www.km##yc.com
- DNS ASK au######on.whatismyip.com
- DNS ASK www.st###hoof.com