Техническая информация
- '<SYSTEM32>\wscript.exe' "%TEMP%\0J6F.vbs"
- '%TEMP%\up.html' (загружен из сети Интернет)
- '%TEMP%\up.html'
- %ProgramFiles%\360\360safe\safemon\HomePageLib.dat
- %TEMP%\aut3.tmp
- %TEMP%\0J6F.vbs
- %TEMP%\aut2.tmp
- %TEMP%\up.html
- %TEMP%\aut1.tmp
- %ProgramFiles%\KSafe\cfg\ksfmon.ini
- %TEMP%\aut3.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- 'tj.#0440.cn':80
- 'localhost':1039
- 'c1#.#1113.cn':80
- http://tj.#0440.cn/Count.asp?ma###############################################
- http://c1#.#1113.cn/tup.html
- DNS ASK tj.#0440.cn
- DNS ASK c1#.#1113.cn
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''