Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SVKP] 'Start' = '00000002'
- <SYSTEM32>\SVKP.sys
- 'cf#.#istory.com':80
- 'rh#####1.mireene.com':80
- cf#.#istory.com/custom/blog/27/271417/skin/images/chk.txt
- rh#####1.mireene.com/Tistory_ip/chk.php?ip####
- rh#####1.mireene.com/Tistory_ip/ip.php
- DNS ASK cf#.#istory.com
- DNS ASK rh#####1.mireene.com
- ClassName: 'Shell_TrayWnd' WindowName: ''