* The data identified by the following URLs was then requested from the remote web server:
o http://www.financetasksforce.com/ht.txt
o http://aineyhosting.com/web.php
o http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
o http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
o http://www.samair.ru/proxy/proxychecker/country.htm
Remote Host Port Number
195.229.126.217 443
64.15.147.205 80
65.55.87.35 80
94.76.239.85 80
Download exe file here:
http://adf.ly/2IA16
hosting infos:
http://whois.domaintools.com/195.229.126.217