Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'rfzmX' = '%HOMEPATH%\rfzmX.url'
- %HOMEPATH%\contacts\xmzfrlution.exe
- %HOMEPATH%\rfzmx.url
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK google.com
- DNS ASK 1d#v.ws
- DNS ASK microsoft.com
- DNS ASK 0x####.#l.files.1drv.com
- DNS ASK st####.rapidssl.com
- '%ProgramFiles(x86)%\internet explorer\ieinstal.exe'