Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\CEID] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\CEID] 'ImagePath' = '%WINDIR%\temp\CEID.sys'
- %WINDIR%\Temp\CEID.sys
- %WINDIR%\twa1n.ini
- %WINDIR%\twein.ini
- %WINDIR%\Temp\123.ini
- %WINDIR%\Temp\CEID.sys
- '69.##7.191.93':20011
- 'localhost':80
- '69.##7.191.94':20011
- '69.##7.191.93':20010
- '69.##7.191.94':20010
- 'tj.##china.org':80
- http:///123.ini via localhost
- http://tj.##china.org/tongji.php?us#################################
- DNS ASK tj.##china.org