Техническая информация
- %TEMP%\lldyprobggzdbo.js
- %TEMP%\lagfhcf_89164.exe
- 'bl##.#izmohelp.com':80
- http://be###yworld.hu/BAj60H
- http://bo##var.ru/w782j3
- http://ba##edia.pl/BEVwnx
- http://bo##nz.net/zlsFhm
- http://ar##it.ru/QRspKz
- http://ba#####foenelmar.com/UDGKfz
- http://be##esi.net/p1U6al
- http://az##s.com/BCxfzy
- http://as####en.systems/lpQk6P
- http://bi#####inovasyon.org.tr/M4W7Hi
- http://bi###ebel.net/KyFfgv
- http://ar####alurji.com/KmvUJ5
- http://bn##oft.in/g8RvjV
- DNS ASK be###yworld.hu
- DNS ASK bm###adag.com
- DNS ASK ar####alurji.com
- DNS ASK bi###ebel.net
- DNS ASK bk##.com
- DNS ASK ba####tsmarried.com
- DNS ASK av###.com.tr
- DNS ASK bi#####inovasyon.org.tr
- DNS ASK bl##.#obrystolik.pl
- DNS ASK as####en.systems
- DNS ASK bn##oft.in
- DNS ASK az##s.com
- DNS ASK be##esi.net
- DNS ASK ba#####foenelmar.com
- DNS ASK ar##it.ru
- DNS ASK at###tic-co.com
- DNS ASK av#####nelcrafts.com
- DNS ASK bo##nz.net
- DNS ASK ba##edia.pl
- DNS ASK ax###overs.com
- DNS ASK bo##var.ru
- DNS ASK ba##son.ru
- DNS ASK bl##.#izmohelp.com
- '<SYSTEM32>\wscript.exe' %TEMP%\lLDyProBGgZdBo.js