Техническая информация
- '%TEMP%\tubeini.exe'
- %TEMP%\tubeini.exe
- %TEMP%\tubei560T.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\arrowu[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\checkip.dyndns[1]
- 'cw###couver.com':80
- 'ha####ouellet.com':80
- 'ch####p.dyndns.org':80
- cw###couver.com/cp/images/digits/arrowu.jpg
- ha####ouellet.com/TOXICOUSTIQUE/arrowu.jpg
- ch####p.dyndns.org/
- DNS ASK cw###couver.com
- DNS ASK ha####ouellet.com
- DNS ASK ch####p.dyndns.org