Техническая информация
- %WINDIR%\ts.dat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\1[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\zhuangbb[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\go[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\1[1].htm
- %WINDIR%\ts.dat
- %WINDIR%\xiaogui.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\wg915[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\cfhama[1]
- 'www.wg##5.com':80
- 'yy.##owan.com':80
- 'www.zh###gbb.com':80
- 'www.cf##ma.cn':80
- 'localhost':1037
- www.zh###gbb.com/1.htm
- www.zh###gbb.com/
- www.wg##5.com/
- yy.##owan.com/go.html
- www.cf##ma.cn/1.htm
- www.cf##ma.cn/down.txt
- www.cf##ma.cn/up.txt
- www.cf##ma.cn/gg.txt
- www.cf##ma.cn/yanzheng/ie.txt
- www.cf##ma.cn/
- DNS ASK www.wg##5.com
- DNS ASK yy.##owan.com
- DNS ASK www.cf##ma.cn
- DNS ASK www.zh###gbb.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Button' WindowName: '????'
- ClassName: 'MS_AutodialMonitor' WindowName: ''