Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Tilsynsassistenten' = '%TEMP%\Chequerwise4\Barkbillens.exe'
- ieinstal.exe
- %TEMP%\chequerwise4\barkbillens.exe
- '79.##4.225.35':8030
- http://www.cm###nergy.it/of.bin
- DNS ASK cm###nergy.it
- '%ProgramFiles(x86)%\internet explorer\ieinstal.exe'