Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\svchost.exe
- %LOCALAPPDATA%\google\chrome\user data\default\cookies
- %LOCALAPPDATA%\google\chrome\user data\default\login data
- %APPDATA%\mozilla\firefox\profiles.ini
- %HOMEPATH%\desktop\holycrosschurchinstructions.docx
- %TEMP%\fp.tmp
- %TEMP%\fp.tmp
- 'za##.##pressonline.com':80
- http://za##.##pressonline.com/h3.php
- DNS ASK za##.##pressonline.com