Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\jicveias.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 536308134
- %APPDATA%\microsoft\windows\jicveias\bveewhbt.exe
- %APPDATA%\microsoft\windows\jicveias\bveewhbt.exe
- 'sh###owin.ru':443
- http://www.ms###csi.com/ncsi.txt
- DNS ASK wi###shop.ug
- DNS ASK sh###owin.ru