Техническая информация
- %TEMP%\msbncpygsnvtcj.js
- %TEMP%\66277.41740126408.exe
- %TEMP%\7953.143204866614.exe
- %TEMP%\24428.49744771594.exe
- %TEMP%\33404.65616343293.exe
- %TEMP%\9134.884943059891.exe
- http://ld###tist.com/xPbm4J
- http://sp####haicafe.com/4I9bwO
- http://th####rmingtree.com/4tv1zU
- http://as###or.com.sg/U5tRF1
- http://mi####rketing.com/mw8A53
- http://ar####nwankwo.com/J5wTv8
- http://ri##oe.com/3jBMIE
- http://il####lgisayar.com/tyGowZ
- http://ho###-hanoi.com/UD4QRl
- http://go###ntwigs.com/hM5szn
- http://gl###xx24.com/flYi3s
- DNS ASK ld###tist.com
- DNS ASK mi###et.com.br
- DNS ASK go###ntwigs.com
- DNS ASK pr##ting.mn
- DNS ASK re###mlane.com
- DNS ASK co####caldas.com
- DNS ASK sh####rbazaar.com
- DNS ASK el####ing-wedge.com
- DNS ASK ho###-hanoi.com
- DNS ASK il####lgisayar.com
- DNS ASK ay#####hediyelik.com
- DNS ASK ri##oe.com
- DNS ASK ph###tphcm.com
- DNS ASK mi####rketing.com
- DNS ASK as###or.com.sg
- DNS ASK th####rmingtree.com
- DNS ASK pe######eandlimejelly.co.uk
- DNS ASK em#.com.sg
- DNS ASK sp####haicafe.com
- DNS ASK la##ven.com
- DNS ASK da###ren.com.br
- DNS ASK ar####nwankwo.com
- DNS ASK gl###xx24.com
- '<SYSTEM32>\wscript.exe' %TEMP%\MsbnCPyGSnvtcj.js