Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\aeajsdjg.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 2021791044
- %APPDATA%\microsoft\windows\aeajsdjg\ubuvtwse.exe
- %APPDATA%\microsoft\windows\aeajsdjg\ubuvtwse.exe
- 'ms###csi.com':80
- 'te#####rvice01.ru.com':80
- http://www.ms###csi.com/ncsi.txt
- DNS ASK pr###st-0124.tk
- DNS ASK te#####rvice01.ru.com