Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{f92B23AB-2DDX-NGnE-KS6x-0000F87A469H}] 'StubPath' = '%APPDATA%\eukPVt\U5Znvu.exe'
- '<SYSTEM32>\svchost.exe'
- '%APPDATA%\eukPVt\U5Znvu.exe' -install
- '%APPDATA%\eukPVt\U5Znvu.exe'
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\time[1].php
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\jc_104[1].txt
- %TEMP%\time.txt
- %TEMP%\data.tmp
- %WINDIR%\Fonts\RQID.ttf
- %APPDATA%\eukPVt\LiveUDHelper.dll
- %APPDATA%\eukPVt\U5Znvu.exe
- %WINDIR%\Fonts\RunQiu.ttf
- %WINDIR%\Fonts\HanQiuSheng.ttf
- %TEMP%\data.tmp
- %TEMP%\time.txt
- 'da##.#unqiusoft.com':80
- 'localhost':1039
- http://da##.#unqiusoft.com/time.php
- http://da##.#unqiusoft.com/plug/jc_104.txt
- DNS ASK da##.#unqiusoft.com
- ClassName: 'Shell_TrayWnd' WindowName: ''