Техническая информация
- 'C:\gji.exe'
- 'C:\ksbinstaller_s_66_77688.exe'
- 'C:\gji.exe' (загружен из сети Интернет)
- 'C:\ksbinstaller_s_66_77688.exe' (загружен из сети Интернет)
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\536\123.VBS"
- C:\ksbinstaller_s_66_77688.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\CAURQNUT.php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\CAOLM51Y.php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\CAW56R8L.php
- C:\gji.exe
- %PROGRAM_FILES%\536\新建文件夹\送大钱了哦.url
- %PROGRAM_FILES%\536\新建文件夹\免费打电话.url
- %PROGRAM_FILES%\536\123.VBS
- %PROGRAM_FILES%\536\新建文件夹\情人.url
- %PROGRAM_FILES%\536\新建文件夹\点击就送钱.url
- %PROGRAM_FILES%\536\新建文件夹\注册送20元.url
- '10#.#99.109.89':80
- 'ws####.yunpan.cn':80
- 'localhost':1036
- DNS ASK ws####.yunpan.cn
- ClassName: '' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'