Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\afsdwr] 'Start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\afsdwr] 'ImagePath' = '<DRIVERS>\afsdwr.sys'
- NtDeviceIoControlFile, драйвер-обработчик: afsdwr.sys
- <DRIVERS>\afsdwr.sys
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\GameAddrData[1].dat
- 'te#########estsys01.stor.sinaapp.com':80
- http://te#########estsys01.stor.sinaapp.com/GameAddrData.dat
- DNS ASK te#########estsys01.stor.sinaapp.com