Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\迅雷免会员 VIP加速.xns
- '' (загружен из сети Интернет)
- %TEMP%\data.tmp
- %TEMP%\pplivesetup_forqd125.exe
- %TEMP%\ff.Dat
- %TEMP%\qq2010.exe
- %TEMP%\WeekGame3603.exe
- %TEMP%\pplivesetup_forqd125.exe
- %TEMP%\qq2010.exe
- 'do##.9688.la':80
- 'do####ad.pplive.com':80
- '96#8.la':80
- 'my##99.info':80
- 'do##.49558.cn':80
- 'localhost':1044
- 'localhost':1045
- 'localhost':1046
- 'localhost':1047
- '23##.com':80
- http://do##.9688.la/ip/ip.php?ge#####
- http://do####ad.pplive.com/pplivesetup_forqd125.exe
- http://www.96#8.la/ok.txt via 96#8.la
- http://www.my##99.info/1/ via my##99.info
- http://do##.49558.cn/soft/WeekGame3603.exe
- http://www.23##.com/tg14.htm via 23##.com
- http://www.23##.com/?33## via 23##.com
- DNS ASK do##.9688.la
- DNS ASK do####ad.pplive.com
- DNS ASK www.96#8.la
- DNS ASK www.my##99.info
- DNS ASK do##.49558.cn
- DNS ASK www.23##.com
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- '%TEMP%\pplivesetup_forqd125.exe'
- '%TEMP%\qq2010.exe'
- '%TEMP%\WeekGame3603.exe'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -Embedding