Техническая информация
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "<Полный путь к файлу>" "<Имя файла>.exe" ENABLE
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "<Текущая директория>\npkcryptx86.exe" "LoginX86" ENABLE
- ClassName: 'OLLYDBG', WindowName: ''
- ClassName: 'GBDYLLO', WindowName: ''
- ClassName: 'pediy06', WindowName: ''
- ClassName: 'FilemonClass', WindowName: ''
- ClassName: '', WindowName: 'File Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'PROCMON_WINDOW_CLASS', WindowName: ''
- ClassName: '', WindowName: 'Process Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'RegmonClass', WindowName: ''
- ClassName: '', WindowName: 'Registry Monitor - Sysinternals: www.sysinternals.com'
- <PATH_SAMPLE>.pfn
- /2014/02/blog-post.html via ch####.blogspot.kr
- /2013/12/2013122661anonymousenewsdesk.html via ch####.blogspot.kr
- /2012/12/50.html via ch####.blogspot.kr
- /2012/07/rankngdos.html via ch####.blogspot.kr
- / via fi##ip.kr
- DNS ASK ch####.blogspot.kr
- DNS ASK ch####.blogspot.com
- DNS ASK 60#####all.blogspot.com
- DNS ASK ge#####og.blogspot.kr
- DNS ASK ge#####og.blogspot.com
- DNS ASK ni#####girl.blogspot.kr
- DNS ASK ni######irl.blogspot.com
- DNS ASK ip##nfig.kr
- DNS ASK fi##ip.kr
- DNS ASK ip#p.kr
- ClassName: '18467-41' WindowName: ''
- ClassName: 'Lineage' WindowName: ''
- '%WINDIR%\syswow64\netsh.exe' firewall del allowedprogram "<Полный путь к файлу>"
- '%WINDIR%\syswow64\netsh.exe' firewall del allowedprogram "<Текущая директория>\npkcryptx86.exe"