Техническая информация
- "%TEMP%\guaguadance.exe" (загружен из сети Интернет)
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.77##h.com/?kj###
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.31##6.net/?uk###
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.66##.net/?uk####
- ClassName: 'Filemonclass' WindowName: ''
- ClassName: 'Regmonclass' WindowName: ''
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\6626[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\31166[1]
- %TEMP%\SE1.tmp
- %TEMP%\guaguadance.exe
- %TEMP%\SE1.tmp
- 'www.31##6.net':80
- 'localhost':1040
- 'www.77##h.com':80
- 'localhost':1038
- 'c.###gua.com.cn':80
- 'localhost':1036
- 'www.66##.net':80
- www.31##6.net/?uk###
- www.77##h.com/?kj###
- c.###gua.com.cn/c/guaguadance_6060000011
- www.66##.net/?uk####
- DNS ASK www.31##6.net
- DNS ASK www.77##h.com
- DNS ASK www.66##.net
- DNS ASK c.###gua.com.cn
- '<IP-адрес в локальной сети>':1034
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '18467-41' WindowName: ''
- ClassName: '4823-00000029' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''