Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\icqmanager] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- '<DRIVERS>\icqmanager.exe'
- '<SYSTEM32>\netsh.exe' firewall set opmode mode=disable
- <DRIVERS>\qci.dll
- <DRIVERS>\icqmanager.exe
- 'bi##oso.net':80
- bi##oso.net/icq/icq.txt
- DNS ASK bi##oso.net