hxxp://93.189.44.187/103.exe
On the other hand when u enter to a C&C via http (ex [url]hxxp://gktibioivpqbot.net/[/url]) u get this msg:
Temporary notes:
You cannot restore files after time has expired! Setting the system clock back will not help you!
Uninstall action and expiry time controlled by server, your key pair destroyed after uninstall (time has expired)!
You can't control it!!!
After uninstall (if you try reinstall) you obtain a new key pair from server.
You can reinstall software only if time has not expired!
Personal message:
Dear guy, please resend your MP 307*********07, you have month. (We know your machine, we wait you...), this is merchant error, sorry.
Why you did not do this immediately after an error?
Uninstall temporary disabled.
Soon will be available the decryption service... Stay with us :)
