Техническая информация
- '%ALLUSERSPROFILE%\iexplore.exe'
- <SYSTEM32>\tpgenlic.dll
- %ALLUSERSPROFILE%\iexplore
- %WINDIR%\Temp\kyd
- %ALLUSERSPROFILE%\iexplore в %ALLUSERSPROFILE%\iexplore.exe
- %WINDIR%\Temp\kyd в %WINDIR%\Temp\kyd.dat
- 'if####.ip138.com':80
- 'localhost':80
- '11#.#55.135.88':8082
- if####.ip138.com/ic.asp
- DNS ASK if####.ip138.com