Техническая информация
- <SYSTEM32>\tasks\windows trol
- %TEMP%\wnitmpo.dll
- %TEMP%\wnitmpo.dll
- %ALLUSERSPROFILE%\windose.txt
- %TEMP%\dnrdfsi11023.dll
- 'wo####ptions.buzz':80
- http://wo####ptions.buzz/agE7nqQLgssuVeUY/OGHAYZZFhfCtspqo.php
- http://wo####ptions.buzz/agE7nqQLgssuVeUY/OGHAYZZFhfCtspqorBFNYMrxHN7TXIlz8vjv1TPmuyrc2yIu.png
- http://wo####ptions.buzz/agE7nqQLgssuVeUY/OGHAYZZFhfCtspqorBFNYMrxHN7TXIlz8vjv1TPmuyrc2yIu.mp4
- DNS ASK wo####ptions.buzz