Техническая информация
- %WINDIR%\temp\cab1e68.tmp
- %WINDIR%\temp\tar1e69.tmp
- %WINDIR%\temp\cab7080.tmp
- %WINDIR%\temp\tar7090.tmp
- %WINDIR%\temp\cab734f.tmp
- %WINDIR%\temp\tar7350.tmp
- %WINDIR%\temp\cab8980.tmp
- %WINDIR%\temp\tar8981.tmp
- %WINDIR%\temp\cabcc0d.tmp
- %WINDIR%\temp\tarcc1e.tmp
- %WINDIR%\temp\cab1e68.tmp
- %WINDIR%\temp\tar1e69.tmp
- %WINDIR%\temp\cab7080.tmp
- %WINDIR%\temp\tar7090.tmp
- %WINDIR%\temp\cab734f.tmp
- %WINDIR%\temp\tar7350.tmp
- %WINDIR%\temp\cab8980.tmp
- %WINDIR%\temp\tar8981.tmp
- %WINDIR%\temp\cabcc0d.tmp
- %WINDIR%\temp\tarcc1e.tmp
- http://br###trot.com/ProcessHacker.jpg
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://oc##.#ectigo.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEG7AChe%2BLVtylIzsmFEcl7A%3D
- http://br###trot.com/blink.php?na##########
- DNS ASK br###trot.com
- DNS ASK microsoft.com
- DNS ASK oc##.#ectigo.com