Техническая информация
- '%WINDIR%\zdsafe.exe'
- NtQueryDirectoryFile, драйвер-обработчик: zdpasscd.sys
- %WINDIR%\zdsafe.exe
- <DRIVERS>\zdpasscd.sys
- %WINDIR%\cc.tmp
- %WINDIR%\cpavsjt.tmp
- %WINDIR%\cpavsjt.tmp
- <DRIVERS>\zdpasscd.sys
- 'MI##.#UJUTANG.COM':80
- 'MI##.#UJUSKY.COM':80
- 'GE##.#UJUTANG.COM':80
- DNS ASK MI##.#UJUTANG.COM
- DNS ASK MI##.#UJUSKY.COM
- DNS ASK GE##.#UJUTANG.COM
- ClassName: 'Shell_TrayWnd' WindowName: ''