Техническая информация
- '%TEMP%\Umlineded.exe'
- %TEMP%\Umlineded.exe
- %TEMP%\tus5A0A.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\rssb[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\checkip.dyndns[1]
- 'bu####ssmoney.in':80
- 'ga###a.blink.pl':80
- 'ch####p.dyndns.org':80
- bu####ssmoney.in/images/rssb.jpg
- ga###a.blink.pl/fpdf/images/rssb.jpg
- ch####p.dyndns.org/
- DNS ASK bu####ssmoney.in
- DNS ASK ga###a.blink.pl
- DNS ASK ch####p.dyndns.org
- ClassName: 'Perspecto' WindowName: 'Nikolaso'