Техническая информация
- %PROGRAM_FILES%\FunshionInstall_C107941.exe (загружен из сети Интернет)
- %PROGRAM_FILES%\PPTV(pplive)_forqiqi_0003exe.exe (загружен из сети Интернет)
- %PROGRAM_FILES%\Kuping_s_8560.exe (загружен из сети Интернет)
- "%TEMP%\Intel.exe" (загружен из сети Интернет)
- %PROGRAM_FILES%\FunshionInstall_C107941.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\FunshionInstall[1].exe
- %PROGRAM_FILES%\PPTV(pplive)_forqiqi_0003exe.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\PPTV(pplive)_forqiqi_0003exe[1].exe
- %TEMP%\Intel.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\ie[1].bmp
- %PROGRAM_FILES%\Kuping_s_8560.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\Kuping_s_8560[1].exe
- 'd.##587.com':80
- 'vi#.#aqio.com':9999
- d.##587.com/FunshionInstall.exe
- d.##587.com/PPTV(pplive)_forqiqi_0003exe.exe
- d.##587.com/ie.bmp
- d.##587.com/Kuping_s_8560.exe
- DNS ASK d.##587.com
- DNS ASK vi#.#aqio.com
- ClassName: 'Shell_TrayWnd' WindowName: ''