Техническая информация
- %PROGRAM_FILES%\Internet Explorer\ppfilm.exe (загружен из сети Интернет)
- <SYSTEM32>\net.exe stop sharedaccess
- <SYSTEM32>\net1.exe stop sharedaccess
- <SYSTEM32>\taskkill.exe /f /im PIPIPlayer.exe
- <SYSTEM32>\taskkill.exe /f /im jfCacheMgr.exe
- %PROGRAM_FILES%\Internet Explorer\ppfilm.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\gocpc[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\ppfilm[1].exe
- 'localhost':1040
- 'dl.##film.cn':80
- 'localhost':1037
- 'www.pp##lm.cn':80
- dl.##film.cn/ppfilm.exe
- www.pp##lm.cn/gocpc.html?go#############################################################
- DNS ASK dl.##film.cn
- DNS ASK www.pp##lm.cn
- '<IP-адрес в локальной сети>':1038
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''