Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\xsmail.bmp
- %HOMEPATH%\Start Menu\Programs\Startup\<Имя вируса>.exe
- '<SYSTEM32>\cmd.exe' /c cleen.bat
- %APPDATA%\xsmail.bmp
- %APPDATA%\cleen.bat
- %APPDATA%\Sleepless.in.Seattle.1993.1080p.BluRay.x264.anoXmous_.mp4
- %TEMP%\nss2.tmp\reasons.dll
- %TEMP%\nss2.tmp\reasons.dll
- 'ba###orany.com':80
- ba###orany.com/close/script.php
- DNS ASK ba###orany.com