Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\wtjecdrf.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 3768263927
- %APPDATA%\microsoft\windows\wtjecdrf\vdsgtsru.exe
- %APPDATA%\microsoft\windows\wtjecdrf\vdsgtsru.exe
- 'yo####e###ks.life':80
- http://yo####e###ks.life/
- DNS ASK yo####e###ks.life