Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Rs4NWu] 'ImagePath' = 'system32\drivers\Rs4NWu.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\Rs4NWu] 'Start' = '00000002'
- <Полный путь к вирусу>
- <DRIVERS>\Rs4NWu.sys
- %ProgramFiles%\msg\msg.vbs
- <Текущая директория>\update.dll
- %TEMP%\1d7dc.tmp
- %TEMP%\1e720.tmp
- %TEMP%\1ec22.tmp
- %TEMP%\1ec22.tmp
- <DRIVERS>\Rs4NWu.sys
- %TEMP%\1d7dc.tmp
- %TEMP%\1e720.tmp
- '11#.#55.215.249':80
- 'localhost':1038
- 'www.9u##y.com':80
- http://www.9u##y.com/GameCheat/EudemonsOnline/maintenance/1.txt
- http://11#.#55.215.249/piaoyh.asp
- DNS ASK www.9u##y.com
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''