Техническая информация
- %TEMP%\rplghb.js
- %TEMP%\39821.59361385406.exe
- %TEMP%\54753.44977575517.exe
- %TEMP%\80484.89574225897.exe
- 'by##t.in':80
- http://de###ome.com/1OStd9
- http://fl###ronics.com/S0ayo3
- http://au#####icwickedwear.com/gOSw1u
- http://eu###trands.com/EcoSIG
- http://sp####haicafe.com/4I9bwO
- http://re###aby.com.br/oysz46
- http://dl###curity.com/xCNaXQ
- http://as###or.com.sg/U5tRF1
- http://mo#####tika-shop.com/6tjHz8
- DNS ASK de###ome.com
- DNS ASK pe#####buyutuculer.com
- DNS ASK wo####in-style.com
- DNS ASK pr####typrobe.com
- DNS ASK mo#####tika-shop.com
- DNS ASK as###or.com.sg
- DNS ASK dl###curity.com
- DNS ASK po#####ichtextile.com
- DNS ASK fa#####collection58.com
- DNS ASK el####ing-wedge.com
- DNS ASK qb###esmaid.com
- DNS ASK da###ren.com.br
- DNS ASK po####oals.co.uk
- DNS ASK ec##ers.com
- DNS ASK re###aby.com.br
- DNS ASK sp####haicafe.com
- DNS ASK co####caldas.com
- DNS ASK eu###trands.com
- DNS ASK au#####icwickedwear.com
- DNS ASK ou##ess.com
- DNS ASK fl###ronics.com
- DNS ASK hu#####etrtrainer.com
- DNS ASK ca###i.com.au
- DNS ASK by##t.in
- '<SYSTEM32>\wscript.exe' %TEMP%\rPLGHB.js