Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\pkmsys] 'ImagePath' = 'system32\DRIVERS\xwpky.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\pkmsys] 'Start' = '00000001'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\xwpky.sys[1].off
- <DRIVERS>\xwpky.sys.off
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\xwpky[1].sys
- <DRIVERS>\xwpky.sys
- 'localhost':1038
- 'www.di#####arcafe.com.br':80
- www.di#####arcafe.com.br/novo/xwpky.sys.off
- www.di#####arcafe.com.br/novo/xwpky.sys
- www.di#####arcafe.com.br/novo/form.php
- DNS ASK www.di#####arcafe.com.br