Техническая информация
- %TEMP%\tphdtznvj.js
- %TEMP%\txxkibz_85488.exe
- %TEMP%\txxkibz_98634.exe
- 're###days.com':80
- http://sh###lovers.com/5ZnYzr
- http://ma####obilya.com/XB1Tfs
- http://in####nda.com.br/yIWq4O
- http://tu####citytour.com/LYmCSw
- http://me###tcanta.com/aYiftp
- http://in####nda.com.br/YxVDaH
- http://se####tronix.com/wFi1ZP
- DNS ASK yo####tionstore.com
- DNS ASK sh###lovers.com
- DNS ASK ra#####chiavon.com.br
- DNS ASK ma####obilya.com
- DNS ASK cr####ljoias.com.br
- DNS ASK in####nda.com.br
- DNS ASK tu####citytour.com
- DNS ASK de####hopper.com
- DNS ASK me###tcanta.com
- DNS ASK ma###s.com.br
- DNS ASK di#####tbandmerch.com
- DNS ASK ir#####ganics.com.au
- DNS ASK se####tronix.com
- DNS ASK re###days.com
- '<SYSTEM32>\wscript.exe' %TEMP%\TpHDtzNvJ.js