Техническая информация
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\cscript.exe
- %WINDIR%\ijjdw.fjy
- %WINDIR%\ijjdw.fjy
- из <Полный путь к вирусу> в %TEMP%\1.tmp
- '67.##2.212.91':33816
- '18#.#1.37.118':33816
- '17#.#09.179.102':33816
- '19#.#2.19.239':33816
- '17#.#1.216.140':33816
- '19#.#6.231.177':33816
- '12#.#4.115.19':33816
- '20#.#16.40.218':33816
- '18#.#92.244.23':33816
- '89.#30.54.0':33816
- '21#.#7.207.48':33816
- '18#.#5.149.23':33816
- '1.###.35.108':33816
- '95.##.45.152':33816
- '19#.#00.147.112':33816
- DNS ASK lo####ollyboobs.biz
- DNS ASK google.com
- DNS ASK microsoft.com