Техническая информация
- [<HKLM>\SOFTWARE\Clients\StartMenuInternet\IE.exe\shell\open\command] '' = '"%PROGRAM_FILES%\IE\IE.exe"'
- [<HKLM>\SOFTWARE\Classes\HTTP\shell\open\command] '' = '"%PROGRAM_FILES%\IE\IE.exe" "%1"'
- '%PROGRAM_FILES%\IE\ie.exe' http://www.so##u.com/index.htm?pi##################################
- %PROGRAM_FILES%\IE\好玩游戏.ico
- %HOMEPATH%\桌面\穿越火线.lnk
- %PROGRAM_FILES%\IE\Internat Explorer.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\reportmac[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].htm
- %HOMEPATH%\桌面\好玩游戏.lnk
- %PROGRAM_FILES%\IE\在线电影.ico
- %PROGRAM_FILES%\IE\IE9.ICO
- %PROGRAM_FILES%\IE\ie.exe
- %PROGRAM_FILES%\IE\ie.ini
- %HOMEPATH%\桌面\Interne Explorer.lnk
- %HOMEPATH%\桌面\在线电影.lnk
- %PROGRAM_FILES%\IE\ie.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\reportmac[1].asp
- 'www.58##.com':80
- 'www.so##u.com':80
- 'localhost':1035
- www.58##.com/adunion/reportmac.asp?ma#######################################################
- www.so##u.com/index.htm?pi##################################
- DNS ASK www.58##.com
- DNS ASK www.so##u.com
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'