Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\xpdx] 'Start' = '00000001'
- NtTerminateProcess, драйвер-обработчик: xpdx.sys
- NtOpenKey, драйвер-обработчик: xpdx.sys
- NtCreateKey, драйвер-обработчик: xpdx.sys
- <SYSTEM32>\xpdx.sys
- 'la#####ommunication.biz':80
- 'ma##.##uster-club.info':25
- '20#.#2.169.15':80
- 'la######mmunication.info':80
- 'la###t2007.com':80
- 'ma##.###.72.168.97.localdomain':25
- '20#.#2.168.97':80
- 'ma##.###.72.168.151.localdomain':25
- 'ma##.#niontrade.biz':25
- 'ma##.##idgamecard.info':25
- la###t2007.com/login.php
- la######mmunication.info/login.php
- la#####ommunication.biz/login.php
- 20#.#2.169.15/login.php
- DNS ASK ma##.##uster-club.info
- DNS ASK cl####r-club.info
- DNS ASK ma##.#niontrade.biz
- DNS ASK la######mmunication.info
- DNS ASK la###t2007.com
- DNS ASK la#####ommunication.biz
- DNS ASK un###trade.biz
- DNS ASK 20#.#2.168.151
- DNS ASK ma##.###.72.168.97.localdomain
- DNS ASK 20#.#2.168.97
- DNS ASK ma##.##idgamecard.info
- DNS ASK pa####mecard.info
- DNS ASK ma##.###.72.168.151.localdomain