Техническая информация
- %WINDIR%\FunshionInstall_C1.exe (загружен из сети Интернет)
- %WINDIR%\FunshionInstall_C1.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\cpaDirectUrl[1].aspx
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\cpaDirectUrl[1].aspx
- 'localhost':1039
- 'zl.##lead.cn':80
- 'a.###uawd.com':80
- 'www.99##xi.com':80
- zl.##lead.cn/cpaDirectUrl.aspx?d=#########################################
- www.99##xi.com/b.txt
- a.###uawd.com/qixi/Funshion3.php
- DNS ASK zl.##lead.cn
- DNS ASK www.99##xi.com
- DNS ASK a.###uawd.com
- ClassName: '' WindowName: ''