Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\qwer78] 'Start' = '00000001'
- NtTerminateProcess, драйвер-обработчик: qwer78.sys
- NtOpenKey, драйвер-обработчик: qwer78.sys
- NtCreateKey, драйвер-обработчик: qwer78.sys
- <DRIVERS>\qwer78.sys
- 'ce####kras-tv.tv':80
- 'ce####kras-tv.biz':80
- 'ma##.##uster-club.info':25
- '20#.#2.169.54':80
- 'il####verybody.tj':80
- 'il####verybody.kz':80
- 'ma##.###.72.168.97.localdomain':25
- '20#.#2.168.97':80
- '20#.#2.169.15':80
- 'ma##.#niontrade.biz':25
- 'ma##.###lin-01.mx.aol.com':25
- 'ma##.###.72.168.151.localdomain':25
- 20#.#2.169.15/nnn3
- 20#.#2.169.15/nnn2
- 20#.#2.169.15/nnn1
- il####verybody.tj/login.php
- 20#.#2.169.54/login.php
- il####verybody.kz/login.php
- ce####kras-tv.biz/login.php
- ce####kras-tv.tv/login.php
- DNS ASK ma##.##uster-club.info
- DNS ASK cl####r-club.info
- DNS ASK ma##.#niontrade.biz
- DNS ASK ce####kras-tv.biz
- DNS ASK il####verybody.tj
- DNS ASK il####verybody.kz
- DNS ASK ce####kras-tv.tv
- DNS ASK 20#.#2.168.151
- DNS ASK ma##.###.72.168.97.localdomain
- DNS ASK 20#.#2.168.97
- DNS ASK ma##.###.72.168.151.localdomain
- DNS ASK un###trade.biz
- DNS ASK ma##.###lin-01.mx.aol.com
- DNS ASK ma#####01.mx.aol.com