5.step 1.cuatro. Effect on DNS

While the IIS is actually operational, the web page taken care of immediately the consumer server that accessed the fresh new page site de l’entreprise by using the “gm-site” Url, eliminating the necessity to sample the brand new IIS service with the servers Ip. With the “displaydns” command factor for the consumer host made in Dining table cuatro along with revealed that new DNS servers offered a complete, proper checklist, since the noticed in Contour 7. Furthermore, a great PowerShell order to test new DNS solution was used so you’re able to try if for example the address servers Ip illustrated a functional DNS host. There is absolutely nothing area to have disturbance on the DNS services due on method of storage space DNS-centric data. The fresh DNS records are typical held inside a system-critical “system32” subdirectory and you can appended with good “.dns” document extension ; hence, it might be very uncommon to own a good ransomware version to focus on the fresh DNS facts themselves, even through a blanket encoding means, unless it actually was are available especially to focus on a servers ecosystem.

5.step 1.5. Effect on DHCP

Similarly to DNS, brand new DHCP service is tough to affect, beyond outright ending the service, and therefore neither around three variants been able to create. The DHCP provider and additionally places its files within an excellent subdirectory from “system32” and utilises hardly any other data files off simple user-friendly directories. The client server displayed not a problem with getting an internet protocol address throughout the DHCP server utilizing the suitable commands out-of most of the three variants. The fresh new DHCP servers director certainly presented the new live Ip launch and you may restoration while the buyer host approved the particular orders, and this can be found in new DHCP servers manager’s app GUI, since this was also kept operational by all the around three ransomware variants. (далее…)