Техническая информация
- NtCreateMutant, драйвер-обработчик: superecu6By4.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\s[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\s[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\s[1]
- <SYSTEM32>\superecu6By4.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\slybaby[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bbs[1]
- <SYSTEM32>\superecu6By4.sys
- 'www.ba##u.com':80
- 'www.sl##aby.cn':80
- www.ba##u.com/s?wd########
- www.ba##u.com/s?wd#########################
- www.sl##aby.cn/
- www.sl##aby.cn/bbs
- DNS ASK www.ba##u.com
- DNS ASK www.sl##aby.cn
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''