Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\windowsghost.exe
- %HOMEPATH%\desktop\namileee.vbs
- 'm.###ebook.com':80
- 'bl#####st.rkn.gov.ru':80
- 'bl#####st.rkn.gov.ru':443
- http://m.###ebook.com/
- http://bl#####st.rkn.gov.ru/
- 'bl#####st.rkn.gov.ru':443
- DNS ASK fa###ook.com
- DNS ASK m.###ebook.com
- DNS ASK bl#####st.rkn.gov.ru
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''