Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\sp1itter] 'ImagePath' = '<DRIVERS>\sp1itter.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\sp1itter] 'Start' = '00000001'
- <DRIVERS>\sp1itter.sys
- <Полный путь к вирусу>
- <DRIVERS>\sp1itter.sys
- 'os#.#crsoft.com':80
- DNS ASK os#.#crsoft.com