Техническая информация
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\n09230945[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\checkip.dyndns[1]
- из <Полный путь к вирусу> в %WINDIR%\Vss\Writers\System\D61D60H8-D93A-3EEE-4CDD-F6F8786B7124.xml
- 'au######on.whatismyip.com':80
- 'ch####p.dyndns.org':80
- au######on.whatismyip.com/n09230945.asp
- ch####p.dyndns.org/
- DNS ASK au######on.whatismyip.com
- DNS ASK ch####p.dyndns.org