Техническая информация
- %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\dyps348i\config14[1].txt
- 'bi#.ly':80
- 'th###rkouts.com':80
- 'th###rkouts.com':443
- http://bi#.ly/2HqMXVc
- http://th###rkouts.com/185137PROTECT.pif
- 'th###rkouts.com':443
- DNS ASK bi#.ly
- DNS ASK th###rkouts.com
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding