Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\WINWORD.lnk
- %PROGRAM_FILES%\Microsoft Office\BIN\WINWORD.EXE
- 'www.km##3.com':80
- 'www.st###hoof.com':80
- http:///ForZRLnk2z/ver.txt via www.km##3.com
- http:///ForZRLnk2z/SomeUpVer.txt via www.km##3.com
- http:///ForZRLnk2z/dizhi.gif via www.km##3.com
- http:///ForZRLnk2z/bak.txt via www.st###hoof.com
- http:///ForZRLnk2z/app.txt via www.km##3.com
- http:///ForZRLnk2z/hostlist.txt via www.km##3.com
- DNS ASK www.km##3.com
- DNS ASK www.st###hoof.com