Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\netaie] 'ImagePath' = '<SYSTEM32>\netaie\netaie.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\netaie] 'Start' = '00000002'
- '<SYSTEM32>\netaie\netaie.exe'
- '<SYSTEM32>\netaie\netaie.exe' /install /silent
- <SYSTEM32>\netaie\ea\cei.txt
- <SYSTEM32>\netaie\netaie.exe
- '5.###.123.24':80
- http://5.###.123.24/updateapp_ea_a.php?ch#####
- http://5.###.123.24/updateapp_ea_a.php?ge#########
- http://5.###.123.24/updateupdater_ea_a.php?ch#####