Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WIKITI' = '<LS_APPDATA>\wikipi.exe'
- <LS_APPDATA>\wikipi.exe
- %TEMP%\~1.tmp
- <LS_APPDATA>\wikipi.exe
- 'www.di##ets.net':8080
- 'www.di##ets.net':443
- 'www.di##ets.net':80
- www.di##ets.net/wKi+gQQL/YVVTRVItNEJCMDlBOUMwMi5BZG1pbmlzdHJhdG9yLEMwNWM.asp
- DNS ASK www.di##ets.net