Техническая информация
- %TEMP%\mppfvrh.js
- %TEMP%\eabxzln_68160.exe
- %TEMP%\eabxzln_18680.exe
- %TEMP%\eabxzln_26085.exe
- %TEMP%\eabxzln_25738.exe
- http://fo###m-bg.com/EZQ9ut
- http://me###tcanta.com/aYiftp
- http://ki#####landscape.com/DktnH7
- http://th####ding.pictures/mx8Kvb
- http://my####thanhtam.com/lJUfuM
- http://si####gems.com.au/fz4uAZ
- http://in####nda.com.br/yIWq4O
- http://pu###apart.com/xZyH9m
- http://tu####citytour.com/LYmCSw
- http://in####moto.com.br/3Y4Vgs
- http://sh###lovers.com/5ZnYzr
- DNS ASK hh##.#x3webs.com
- DNS ASK in####moto.com.br
- DNS ASK es###tyvest.com
- DNS ASK tu####citytour.com
- DNS ASK gr####murah.com.my
- DNS ASK te###-foni.com
- DNS ASK pu###apart.com
- DNS ASK hu######lsuppliesmfg.com
- DNS ASK se###ecarts.com
- DNS ASK sh####mejewelry.com
- DNS ASK re######vewebtemplate.com
- DNS ASK in####nda.com.br
- DNS ASK ju####tesano.com
- DNS ASK si####gems.com.au
- DNS ASK th####ding.pictures
- DNS ASK ki#####landscape.com
- DNS ASK me###tcanta.com
- DNS ASK ra#####chiavon.com.br
- DNS ASK yo####tionstore.com
- DNS ASK ex#####onellehair.com
- DNS ASK th#####dothanhly.com
- DNS ASK fo###m-bg.com
- DNS ASK ob###ate.com
- DNS ASK ho####sire.co.uk
- DNS ASK ir#####ganics.com.au
- DNS ASK my####thanhtam.com
- DNS ASK sh###lovers.com
- '<SYSTEM32>\wscript.exe' %TEMP%\MPpfvRh.js