Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\idyfcg] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\idyfcg] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\idyfcg] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k idyfcg
- <SYSTEM32>\bfzhli.dll
- <SYSTEM32>\0003c006.ini
- '58.##.227.48':80
- 58.##.227.48/20120516/132251/199250.jsp
- 58.##.227.48/20120516/132238/186312.jsp
- 58.##.227.48/20120516/132317/225406.jsp
- 58.##.227.48/20120516/132304/212375.jsp
- 58.##.227.48/20120516/132225/173359.jsp
- 58.##.227.48/20120516/132145/133234.jsp
- 58.##.227.48/20120516/132132/119703.jsp
- 58.##.227.48/20120516/132212/160156.jsp
- 58.##.227.48/20120516/132158/146515.jsp