Техническая информация
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\cscript.exe
- %WINDIR%\ijjdw.fjy
- %WINDIR%\ijjdw.fjy
- %WINDIR%\ijjdw.fjy
- из <Полный путь к вирусу> в %TEMP%\1.tmp
- '19#.#7.238.245':33816
- '85.#4.54.48':33816
- '18#.#60.38.59':33816
- '18#.#08.233.103':33816
- '11#.#7.102.107':33816
- '86.##6.191.12':33816
- '87.##9.47.176':33816
- '11#.#96.170.120':33816
- '85.##.208.219':33816
- '10#.#86.171.110':33816
- '11#.68.88.5':33816
- '11#.#52.12.17':33816
- '10#.#3.166.248':33816
- '80.##.119.65':33816
- '70.##.26.118':33816
- DNS ASK xe###necers.ru
- DNS ASK google.com
- DNS ASK microsoft.com