Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\baby] 'ImagePath' = '<SYSTEM32>\Past0uSvq.sys'
- <SYSTEM32>\Past0uSvq.sys
- <SYSTEM32>\Past0uSvq.sys
- 'www.it##86.com':80
- 'ft######3595.s1.tqxq.com':80
- 'localhost':1037
- http://www.it##86.com/poster.html
- http://ft######3595.s1.tqxq.com/piaoyh.asp
- DNS ASK www.it##86.com
- DNS ASK ft######3595.s1.tqxq.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''