Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\sihruiie.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 1161675819
- %APPDATA%\microsoft\windows\sihruiie\twfsfsvu.exe
- %APPDATA%\microsoft\windows\sihruiie\twfsfsvu.exe
- 'li####.adygeya.su':80
- 'io#####i.mangyshlak.su':80
- http://www.ms###csi.com/ncsi.txt
- DNS ASK mi###aoin.info
- DNS ASK li####.adygeya.su
- DNS ASK io#####i.mangyshlak.su
- DNS ASK mi###diowi.xyz
- DNS ASK io###8dudi.xyz