Техническая информация
- %TEMP%\ixp000.tmp\gopvqrt.dat
- %TEMP%\ixp000.tmp\eaqdwbass.dat
- %TEMP%\ixp000.tmp\eaqdwbass.dat.1
- %TEMP%\ixp000.tmp\eaqdwbass.dat.2
- %TEMP%\ixp000.tmp\eaqdwbass.dat.3
- %TEMP%\ixp000.tmp\bghgcqrx.bat
- %TEMP%\ixp000.tmp\lenicivispn.dat
- %TEMP%\ixp000.tmp\fstoejyjng.exe
- '<DNS_SERVER>':53
- DNS ASK 65##################152940002611db11592849c6700f6654603ee11cb.bic.xdk03.fun
- DNS ASK 65##################152940102611db11592849c6700f6654603ee11cb.bic.xdk03.fun
- '%TEMP%\ixp000.tmp\fstoejyjng.exe' lenicivispn.dat 322519376
- '%WINDIR%\syswow64\cmd.exe' /d /c bghgcqrx.bat 322519376 (со скрытым окном)