Техническая информация
- %TEMP%\à ¥áãcf¸¨öú¹¤¾ß\krnln.fnr
- %TEMP%\à ¥áãcf¸¨öú¹¤¾ß\xplib.fne
- %TEMP%\à ¥áãcf¸¨öú¹¤¾ß\htmlview.fne
- %TEMP%\à ¥áãcf¸¨öú¹¤¾ß\iext.fnr
- %TEMP%\à ¥áãcf¸¨öú¹¤¾ß\eapi.fne
- %TEMP%\à ¥áãcf¸¨öú¹¤¾ß\shell.fne
- %WINDIR%\system\1.exe
- http://ku##.com/Gg.html
- http://www.ra##y.com/favicon.ico
- http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
- http://ia.#1.la/go1?id###########################################################################################################################################################################...
- http://www.ra##y.com/tj.js?15########
- http://www.ra##y.com/js.js?15########
- http://cf##z.cn/favicon.ico
- http://js.##ers.51.la/19231143.Js
- http://www.zz##en.com/images/homej_conbg3.gif
- http://js.##ers.51.la/16589082.js
- http://www.zz##en.com/images/head_pic.gif
- http://www.xl##ke.com/tj.js?15########
- http://ku##.com/
- http://www.zz##en.com/css/index.css
- http://www.xl##ke.com/js.js?15########
- http://www.xl##ke.com/
- http://www.ra##y.com/
- http://cf##z.cn/
- DNS ASK ku##.com
- DNS ASK xl##ke.com
- DNS ASK zz##en.com
- DNS ASK cf##z.cn
- DNS ASK hm.##idu.com
- DNS ASK gm##.com
- DNS ASK ra##y.com
- DNS ASK js.##ers.51.la
- DNS ASK ia.#1.la
- DNS ASK st####.gm5555.com
- ClassName: '' WindowName: 'Microsoft Internet Explorer'
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- '%ProgramFiles%\mozilla firefox\firefox.exe' -osint -url "http://ku##.com/"
- '%ProgramFiles%\mozilla firefox\firefox.exe' -osint -url "http://cf##z.cn/"