Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\www.skdos.com] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationaloce] 'Start' = '00000002'
- '<SYSTEM32>\qqiuqi.exe'
- '<SYSTEM32>\skdos.exe'
- 'C:\anti_b.exe'
- 'C:\anti_cas.exe'
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\qqiuqi.exe
- <SYSTEM32>\skdos.exe
- C:\anti_b.exe
- C:\anti_cas.exe
- <SYSTEM32>\skdos.exe
- C:\anti_cas.exe
- 'wi###.sytes.net':2125
- 'wi###.sytes.net':2012
- DNS ASK wi###.sytes.net