Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\q46tdjni] 'ImagePath' = '%WINDIR%\q46tdjni'
- [<HKLM>\SYSTEM\ControlSet001\Services\q46tdjni] 'Start' = '00000001'
- 'C:\HNInstall_Setup_1329860342_liming2_001.exe' (загружен из сети Интернет)
- 'C:\inst_buychannel_34.exe' (загружен из сети Интернет)
- 'C:\HNInstall_Setup_1329860342_liming2_001.exe'
- 'C:\inst_buychannel_34.exe'
- %WINDIR%\SSL\Sample CA 2.cer
- C:\inst_buychannel_34.exe
- C:\HNInstall_Setup_1329860342_liming2_001.exe
- %WINDIR%\q46tdjni
- %WINDIR%\yyqg.dll
- %WINDIR%\SSL\cert.db
- %WINDIR%\q46tdjni
- 'd.###note.com':80
- 'localhost':1046
- 'www.41#.la':80
- 'dl.##0safe.com':80
- 'localhost':1037
- 'www.11#1.la':80
- 'h.##m.cc':7518
- http://d.###note.com/downloads/liming2/HNInstall_Setup_1329860342_liming2_001.exe
- http://www.41#.la/
- http://www.11#1.la/gx/fzgx.txt
- http://dl.##0safe.com/ludashi/inst_buychannel_34.exe
- DNS ASK d.###note.com
- DNS ASK www.41#.la
- DNS ASK dl.##0safe.com
- DNS ASK www.11#1.la
- DNS ASK h.##m.cc
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''