Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'premium' = '<SYSTEM32>\igfxtrai.exe'
- <SYSTEM32>\shacrypt.exe (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\darknigh[1].exe
- <SYSTEM32>\shacrypt.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\readme[1].txt
- <DRIVERS>\etc\net
- <DRIVERS>\etc\net
- <DRIVERS>\etc\hosts
- '20#.#8.97.217':80
- 'pr#####gd.dnsdojo.org':80
- 'www.dj###tias.com':80
- 'localhost':1038
- pr#####gd.dnsdojo.org/.../darknigh.exe
- 20#.#8.97.217/manual/readme.txt
- www.dj###tias.com/plugins/search/sea.php
- DNS ASK pr#####gd.dnsdojo.org
- DNS ASK www.dj###tias.com
- ClassName: 'Shell_TrayWnd' WindowName: ''