Техническая информация
- ekrn.exe
- ccapp.exe
- C:\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\xiaoma[1].exe
- 'ys##.ys168.com':80
- 'localhost':1037
- ys##.ys168.com/1.0/374648456/l25527G2NKKNLjRtJWK/xiaoma.exe
- DNS ASK ys##.ys168.com