Техническая информация
- '%PROGRAM_FILES%\leeboo11_563.exe' /VERYSILENT /SP-
- '%PROGRAM_FILES%\leeboo11_563.exe' (загружен из сети Интернет)
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://www.my##da.cn/5.htm
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://ho##.pomoho.com/lifanglu.shtml
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\lifanglu[1].shtml
- %PROGRAM_FILES%\leeboo11_563.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\leeboo11_563[1].exe
- 'do##.aeeae.cn':80
- 'ho##.pomoho.com':80
- 'localhost':1039
- 'localhost':1036
- 'localhost':1038
- ho##.pomoho.com/lifanglu.shtml
- do##.aeeae.cn/leeboo11_563.exe
- DNS ASK www.my##da.cn
- DNS ASK ho##.pomoho.com
- DNS ASK do##.aeeae.cn
- ClassName: 'Button' WindowName: '??????????????????????????(&A)'
- ClassName: '#32770' WindowName: '(null)'
- ClassName: 'Button' WindowName: '????????????????????'
- ClassName: 'Button' WindowName: '?? ????????????????????????????'
- ClassName: 'Button' WindowName: '????????????????'
- ClassName: '(null)' WindowName: '?????????????????? ???? '
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: '(null)' WindowName: '?????????????????? ????'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'