Техническая информация
- %TEMP%\kwxnekslyt
- %TEMP%\kwxnekslyt.dll
- 'en#######aisons.perso.sfr.fr':80
- 'me##.metro.ru':80
- 'ma###rambaro.ws':80
- http://en#######aisons.perso.sfr.fr/dilveh
- http://www.me##.metro.ru/uumr65
- http://ma###rambaro.ws/1m202
- DNS ASK in#######onesjosearteaga.com
- DNS ASK en#######aisons.perso.sfr.fr
- DNS ASK me##.metro.ru
- DNS ASK ma###rambaro.ws
- DNS ASK li###zottola.it
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\KWXNEK~1.DLL,qwerty 323