Техническая информация
- %TEMP%\ubrthvzukwgqw.js
- %TEMP%\79494.20681821968.exe
- http://ic####eans.com.br/HGWtEU
- http://ph#####sesbestgo.com/BpDi95
- http://ld###tist.com/xPbm4J
- http://fa###xwigs.com/AYLsw1
- http://hk##sh.com/F4Q1l6
- http://my####omized.com/aJXyCN
- http://im##ice.com/4HCbnY
- http://mi####rketing.com/mw8A53
- http://st#######ndstonesjewelry.com/iJX0w5
- http://bi####dalshop.com/RzYisV
- http://au#####icwickedwear.com/gOSw1u
- DNS ASK ic####eans.com.br
- DNS ASK mm###lhi.com
- DNS ASK at###ross.com
- DNS ASK bi####dalshop.com
- DNS ASK st#######ndstonesjewelry.com
- DNS ASK mi####rketing.com
- DNS ASK im##ice.com
- DNS ASK my####omized.com
- DNS ASK hk##sh.com
- DNS ASK po####oals.co.uk
- DNS ASK me###ashion.com
- DNS ASK fl######turabouquet.com.br
- DNS ASK hu#####etrtrainer.com
- DNS ASK fa###xwigs.com
- DNS ASK fa####nkumbh.com
- DNS ASK 80####opsocal.com
- DNS ASK mi###et.com.br
- DNS ASK mo#######dafricantextiles.com
- DNS ASK yu####jewels.com
- DNS ASK ld###tist.com
- DNS ASK fo#######sourcecentre.com.sg
- DNS ASK e-##o.com
- DNS ASK ph#####sesbestgo.com
- DNS ASK ni###print.com
- DNS ASK fl###rio.com.br
- DNS ASK gf##yle.com
- DNS ASK au#####icwickedwear.com
- '<SYSTEM32>\wscript.exe' %TEMP%\ubrTHVzUKWgQw.js