Техническая информация
- %ALLUSERSPROFILE%\auzcqtn5a9uh.txt
- %ALLUSERSPROFILE%\aljvcnesmaw7y.txt
- %ALLUSERSPROFILE%\avd9ramnq.tmp
- '94.##1.100.149':80
- http://94.##1.100.149/aOz28dTyY4wn0.dat
- '%WINDIR%\syswow64\rundll32.exe' %ALLUSERSPROFILE%\aVd9ramNq.tmp,Motd