Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\kzq5re] 'Start' = '00000001'
- NtTerminateProcess, драйвер-обработчик: kzq5re.sys
- NtOpenKey, драйвер-обработчик: kzq5re.sys
- NtCreateKey, драйвер-обработчик: kzq5re.sys
- <SYSTEM32>\kzq5re.sys
- 'pr###uning.org':80
- '20#.#2.169.15':80
- 'ma##.##uster-club.info':25
- 'pr######onal-tuning.info':80
- 'pr###uning.mobi':80
- 'pr###uning.name':80
- '74.##5.232.51':25
- '74.##5.232.51':80
- '20#.#2.169.54':80
- '20#.#6.232.182':25
- 'ma##.aol.com':25
- '67.##5.160.76':25
- 20#.#2.169.54/nnn3?i=#
- 20#.#2.169.54/nnn2?i=#
- 20#.#2.169.54/nnn1?i=#
- pr###uning.name/login.php
- pr###uning.mobi/login.php
- pr######onal-tuning.info/login.php
- 20#.#2.169.15/login.php
- 20#.#2.169.54/login.php
- pr###uning.org/login.php
- DNS ASK ma##.##uster-club.info
- DNS ASK cl####r-club.info
- DNS ASK ma##.#icrosoft.com
- DNS ASK pr###uning.org
- DNS ASK pr######onal-tuning.info
- DNS ASK pr###uning.mobi
- DNS ASK pr###uning.name
- DNS ASK ya##o.com
- DNS ASK ma##.google.com
- DNS ASK google.com
- DNS ASK ma##.yahoo.com
- DNS ASK microsoft.com
- DNS ASK ma##.aol.com
- DNS ASK ao#.com