Техническая информация
- %TEMP%\zkybcjyits.js
- %TEMP%\50052.86270308152.exe
- %TEMP%\52247.84567833537.exe
- %TEMP%\6673.7928413835025.exe
- %TEMP%\15846.120543269977.exe
- http://ca##oxy.com/7YnKvu
- http://or####tags.co.uk/BRgn0x
- http://im##ice.com/4HCbnY
- http://ld###tist.com/xPbm4J
- http://af######nylflooring.co.uk/atXTgL
- http://no####rothers.com/tbjMPd
- http://fa###xwigs.com/AYLsw1
- http://fa###xwigs.com/cgi-sys/suspendedpage.cgi
- http://ar####nwankwo.com/J5wTv8
- http://co###nte.com.sg/QAN1G8
- http://ib####rect.co.uk/p4HAay
- DNS ASK ca##oxy.com
- DNS ASK pr####typrobe.com
- DNS ASK co###nte.com.sg
- DNS ASK j2####ing.com.sg
- DNS ASK ar####nwankwo.com
- DNS ASK fa###xwigs.com
- DNS ASK no####rothers.com
- DNS ASK ll####sstore.com
- DNS ASK po###chi.com
- DNS ASK af######nylflooring.co.uk
- DNS ASK ld###tist.com
- DNS ASK sh####ackers.com
- DNS ASK in####t-logic.com
- DNS ASK at###ross.com
- DNS ASK mr####online.com
- DNS ASK im##ice.com
- DNS ASK or####tags.co.uk
- DNS ASK el####ing-wedge.com
- DNS ASK ib####rect.co.uk
- '<SYSTEM32>\wscript.exe' %TEMP%\zKyBCJyits.js