Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ceaceabcb' = '%APPDATA%\ceaceabcb.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'eebbaeeab' = '%APPDATA%\eebbaeeab.exe'
- '%APPDATA%\ceaceabcb.exe'
- '%APPDATA%\eebbaeeab.exe'
- %APPDATA%\ceaceabcb.exe
- %APPDATA%\eebbaeeab.exe
- 'dx##c.org':80
- http://dx##c.org/wp-content/themes/dynamix/DynamiX/bbpress/mailer.php
- DNS ASK dx##c.org