Техническая информация
- %TEMP%\at9johimyiaz9
- %TEMP%\at9johimyiaz9.dll
- http://www.tm###ssebau.de/to7ob
- http://do####klee.wo.to/samr1lp7
- http://an######nelli.interfree.it/rfer0z1
- DNS ASK tm###ssebau.de
- DNS ASK do####klee.wo.to
- DNS ASK wa###ewang.name
- DNS ASK an######nelli.interfree.it
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\AT9JOH~1.DLL,qwerty 323