Техническая информация
- %WINDIR%\syswow64\svchost.exe
- %ALLUSERSPROFILE%\kaosdma.txt
- 'ot###babe.com':80
- http://ap#.#pify.org/
- http://tr####ilot-scam.com/32453.exe
- http://ap#.#pify.org/?fo########
- http://pe###eal.com/8/forum.php
- DNS ASK ap#.#pify.org
- DNS ASK pe###eal.com
- DNS ASK tr####ilot-scam.com
- DNS ASK ot###babe.com
- '%WINDIR%\syswow64\svchost.exe'