Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\msliksurserv] 'start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\msliksurserv.sys] 'ImagePath' = 'globalroot<DRIVERS>\msliksurserv.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\msliksurserv.sys] 'Start' = '00000001'
- <SYSTEM32>\msiexec.exe /V
- %TEMP%\FR243532.tmp
- <DRIVERS>\msliksurserv.sys
- %TEMP%\is-JDQDH.tmp\setup.exe
- %TEMP%\tmp2.tmp
- %TEMP%\tmp1.tmp
- <SYSTEM32>\msliksurcredo.dll
- %TEMP%\is-JDQDH.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-4PCPN.tmp\<Имя вируса>.tmp
- %TEMP%\is-JDQDH.tmp\_isetup\_shfoldr.dll
- <SYSTEM32>\msliksurdns.dll
- %TEMP%\is-JDQDH.tmp\_isetup\_iscrypt.dll
- DNS ASK ie###gxvvh.com
- DNS ASK yb###eyzfp.com
- DNS ASK gw###tgznj.com
- DNS ASK zr###hjtgv.com
- DNS ASK yt###duayz.com
- DNS ASK cf###onlgy.com
- DNS ASK dd###tkbgx.com
- DNS ASK www.microsoft.com
- DNS ASK ab###koozn.com
- DNS ASK jb###gfmzj.com
- DNS ASK dj###bqlit.com
- ClassName: 'Shell_TrayWnd' WindowName: ''