Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WSTService] 'ImagePath' = '"%ProgramFiles%\WebStressTool\WSTService.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\WSTService] 'Start' = '00000002'
- '<SYSTEM32>\wscript.exe' "%ProgramFiles%\WebStressTool\wst.vbs"
- '<SYSTEM32>\net1.exe' Start WSTService
- '%ProgramFiles%\WebStressTool\WSTService.exe'
- '<SYSTEM32>\net.exe' Start WSTService
- '<SYSTEM32>\cmd.exe' /c ""%ProgramFiles%\WebStressTool\Install.bat""
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe' WSTService.exe
- %ProgramFiles%\WebStressTool\InstallUtil.InstallLog
- %ProgramFiles%\WebStressTool\logo.ico
- %ProgramFiles%\WebStressTool\update.exe
- %HOMEPATH%\Desktop\WSTStart.lnk
- %ProgramFiles%\WebStressTool\WSTService.InstallState
- %ProgramFiles%\WebStressTool\WSTService.InstallLog
- %ProgramFiles%\WebStressTool\WSTService.exe
- %ProgramFiles%\WebStressTool\wst.vbs
- %ProgramFiles%\WebStressTool\UnInstall.bat
- %ProgramFiles%\WebStressTool\Install.bat
- %ProgramFiles%\WebStressTool\WSTStart.exe
- %ProgramFiles%\WebStressTool\wst.exe
- %ProgramFiles%\WebStressTool\wst.dll
- 'ws#.#dkiller.cn':80
- 'wp#d':80
- http://ws#.#dkiller.cn/ipport.ashx
- http://ws#.#dkiller.cn/update.ashx?v=########
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK ws#.#dkiller.cn
- DNS ASK wp#d