Техническая информация
- %PROGRAM_FILES%\gs.exe
- %PROGRAM_FILES%\gs.exe (загружен из сети Интернет)
- <Текущая директория>\updateEv.log
- %ALLUSERSPROFILE%\Application Data\kingsoft\kws\kws.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\gs[1].gif
- %PROGRAM_FILES%\gs.exe
- 'kw####a.duba.net':80
- 'i2#.#uba.net':80
- 'localhost':1036
- 'fr##.twhun.tw':80
- i2#.#uba.net/urlrcv.php?mc###################
- kw####a.duba.net/wdreporter/Verify?uu#########################################
- fr##.twhun.tw/user/rxfve/image/gs.gif
- DNS ASK i2#.#uba.net
- DNS ASK kw####a.duba.net
- DNS ASK fr##.twhun.tw
- ClassName: 'Shell_TrayWnd' WindowName: ''