Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Form1Temperamentsfuldeste5' = '%HOMEPATH%\Form1uvederheftighedernes\Form1Inderside.exe'
- ieinstal.exe
- %HOMEPATH%\form1uvederheftighedernes\form1inderside.exe
- http://www.mi###inlone.com/binnov/Novmpt_encrypted_62A2390.bin
- DNS ASK mi###inlone.com
- DNS ASK No####tservices.com
- '%ProgramFiles(x86)%\internet explorer\ieinstal.exe'