Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\AdobeS.exe
- %APPDATA%\AdobeS\m5.txt
- %APPDATA%\AdobeS\CYNHUCRO23256.txt
- %TEMP%\~DF41A4.tmp
- %APPDATA%\AdobeS\mh2
- 'www.ka####.somee.com':80
- www.ka####.somee.com/Cmd/CYNHUCRO23256.txt
- www.ka####.somee.com/Server.aspx?U=#############
- DNS ASK www.ka####.somee.com