Техническая информация
- '%WINDIR%\pipi.exe' (загружен из сети Интернет)
- '<SYSTEM32>\net1.exe' stop sharedaccess
- '%WINDIR%\pipi.exe' /sp- /silent /norestart
- '<SYSTEM32>\net.exe' stop sharedaccess
- '<SYSTEM32>\cmd.exe' /c net stop sharedaccess
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -Embedding
- %WINDIR%\pipi.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\fendouyisheng[1]
- 'localhost':1042
- 'dl.#ipi.cn':80
- 'localhost':1039
- 'www.fe####yisheng.cn':80
- http://dl.#ipi.cn/pipi.exe
- http://www.fe####yisheng.cn/
- DNS ASK dl.#ipi.cn
- DNS ASK www.fe####yisheng.cn
- ClassName: 'TWizardForm' WindowName: '?? - PIPI'
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '#32770' WindowName: 'PIPIPlayer'
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'IEFrame' WindowName: '????-??????-?????? - Microsoft Internet Explorer'