Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SonyAgent' = '<Полный путь к вирусу>'
- '<SYSTEM32>\wermgr.exe' -queuereporting
- <Полный путь к вирусу>
- '11#.#73.248.110':80
- 'localhost':49206
- '5.###.109.220':80
- 'localhost':49212
- '5.#.28.239':80
- 'localhost':49209
- '10#.#7.162.4':80
- 'localhost':49197
- '31.##2.238.146':80
- 'localhost':49203
- '21#.#8.180.34':80
- 'localhost':49200
- '19#.#2.47.46':80
- '93.#7.13.42':80
- '22#.#1.116.13':80
- '77.##2.234.52':80
- '92.##.184.50':80
- '15#.0.52.21':80
- '86.##.25.169':80
- 'localhost':49215
- '11#.#6.102.20':80
- '77.##2.17.13':80
- '89.##0.226.26':80
- '94.#7.77.16':80
- 'localhost':49194
- 'localhost':49170
- '60.##.74.220':80
- 'localhost':49167
- '17#.#15.232.156':80
- 'localhost':49173
- '20#.#6.78.14':80
- 'localhost':49161
- '11#.#33.168.13':80
- 'localhost':49158
- '14#.#70.225.85':80
- 'localhost':49164
- '10#.#7.125.18':80
- 'localhost':49188
- '77.##2.23.60':80
- 'localhost':49185
- '93.##.190.28':80
- 'localhost':49191
- '21#.204.4.3':80
- 'localhost':49179
- '95.#9.224.3':80
- 'localhost':49176
- '13#.#36.145.8':80
- 'localhost':49182
- '17#.#3.192.38':80
- 15#.0.52.21/install.htm
- 19#.#2.47.46/default.htm
- 11#.#6.102.20/home.htm
- 21#.204.4.3/index.htm
- 92.##.184.50/home.htm
- 93.#7.13.42/start.htm
- 95.#9.224.3/start.htm
- 94.#7.77.16/search.htm
- 89.##0.226.26/setup.htm
- 22#.#1.116.13/search.htm
- 77.##2.17.13/online.htm