Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\usbctl] 'ImagePath' = '<SYSTEM32>\usbctl.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\usbctl] 'Start' = '00000002'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\_check32.bat" "
- %TEMP%\_check32.bat
- %WINDIR%\nod_x32.txt
- %WINDIR%\pst_x32.log
- <SYSTEM32>\usbctl.exe
- '21#.#3.205.242':80
- '88.#98.8.15':80
- '98.##3.147.252':80
- 'ns.#k2.net':53
- '67.##5.160.76':80
- http://88.#98.8.15/guestbook.php
- http://21#.#3.205.242/guestbook.php
- http://98.##3.147.252/guestbook.php
- DNS ASK www.we#.de
- DNS ASK www.ya##o.com
- DNS ASK ns.#k2.net