Техническая информация
- %WINDIR%\explorer.exe
- %WINDIR%\syswow64\napstat.exe
- 'ho####heroines.com':80
- http://www.ho####heroines.com/fhuh/?-Z#####################################################################################
- DNS ASK bi#####airesboat.com
- DNS ASK ho####heroines.com
- DNS ASK sm####command.com
- DNS ASK py####rutine.quest
- DNS ASK xn#####bo3j90du3avi.net
- DNS ASK mo####flnancial.com
- '%WINDIR%\syswow64\napstat.exe'