Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\basd2] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\basd2] 'ImagePath' = '%WINDIR%\temp\basd2.sys'
- %WINDIR%\Temp\basd2.sys
- %WINDIR%\twa1n.ini
- %WINDIR%\twein.ini
- %WINDIR%\Temp\First.html
- %WINDIR%\Temp\fn1109.ini
- '10#.#16.240.82':20301
- '10#.#16.240.82':80
- 'tj##8.top':80
- '10#.#16.240.82':20300
- http:///fn1109.ini via 10#.#16.240.82
- http://www.tj##8.top/tongji.php?us################################# via tj##8.top
- DNS ASK www.tj##8.top