Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '"<SYSTEM32>\ip.exe"' = '"ip.exe"'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\ip[1].php
- '94.##0.191.201':25
- 'www.hi##m.com':80
- www.hi##m.com/ip.php
- DNS ASK sm##.mail.ru
- DNS ASK ya.ru
- DNS ASK www.hi##m.com