Техническая информация
- %TEMP%\haoexp.exe
- %TEMP%\QQ2011.exe
- C:\QQ2012_Setup.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.ha##08.com/ad1.html
- <SYSTEM32>\wscript.exe "C:\2012.vbs"
- %HOMEPATH%\My Documents\AppData\Roaming\hao108\eAPI.fne
- %HOMEPATH%\My Documents\AppData\Roaming\hao108\hao108.1.0.0.1092.exe
- %TEMP%\vqqsdl.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ad1[1].html
- %HOMEPATH%\Desktop\hao108.lnk
- %HOMEPATH%\My Documents\AppData\Roaming\hao108\krnln.fnr
- %TEMP%\haoexpo.exe
- %TEMP%\$inst\2.tmp
- C:\2012.vbs
- C:\QQ2012_Setup.exe
- %TEMP%\haoexp.exe
- %TEMP%\QQ2011.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\temp_0.tmp
- 'dl###r.qq.com':80
- 'www.ha##08.com':80
- 'localhost':1038
- www.ha##08.com/ad1.html
- DNS ASK dl###r.qq.com
- DNS ASK www.ha##08.com
- DNS ASK pd###r0.qq.com
- DNS ASK st##.qq.com
- '58.##.10.235':8000
- 'pd###r0.qq.com':8000
- 'st##.qq.com':8000
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Progman' WindowName: 'Program Manager'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''