Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\EvvmS8KVI] 'ImagePath' = '<SYSTEM32>\9w1mUBY\EvvmS8KVI.ak'
- NtQuerySystemInformation, драйвер-обработчик: EvvmS8KVI.ak
- <SYSTEM32>\9w1mUBY\EvvmS8KVI.ak
- %TEMP%\iesetup.log
- <SYSTEM32>\9w1mUBY\EvvmS8KVI.ak
- 'www.bing.com':80
- '12#.#6.208.120':17678
- '12#.#6.213.98':11247
- 'www.qq.com':80
- http://www.bing.com/
- http://www.qq.com/
- DNS ASK www.bing.com
- DNS ASK www.qq.com
- '25#.#55.255.255':31415