Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\scanners] 'Start' = '00000002'
- '%TEMP%\TROJAN.exe'
- '<SYSTEM32>\killer.exe'
- '<SYSTEM32>\svchost.exe' -k scanners
- '<SYSTEM32>\ping.exe' 127.0.0.1 -n 3
- <SYSTEM32>\scanners32.bxy
- %TEMP%\TROJAN.exe
- <SYSTEM32>\killer.exe
- %TEMP%\TROJAN.exe
- <SYSTEM32>\killer.exe
- 'aa#####234.gnway.net':8967
- DNS ASK aa#####234.gnway.net