Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Microsoft Office.exe
- '%HOMEPATH%\Start Menu\Programs\Startup\Microsoft Office.exe'
- C:\pagefile.dat
- C:\bootfont.dat
- %APPDATA%\irm.dll
- C:\pagefile.dat
- C:\bootfont.dat
- 'to####n.ostabil.nu':80
- to####n.ostabil.nu/news/cdc7cdcdcfB2906001.jpg
- to####n.ostabil.nu/news/article.php?re##################################
- DNS ASK to####n.ostabil.nu