Техническая информация
- C:\server.exe
- C:\CFУДФВёЁЦъ ·ЅїтНёКУ ОЮєуЧш Б¬їХМшФѕ ТЖ¶Ї»рЙсјУМШБЦЈЁНш°ЙјТНҐНЁУГ°жЈ©0224SP3.exe
- C:\CFУДФВёЁЦъ ·ЅїтНёКУ ОЮєуЧш Б¬їХМшФѕ ТЖ¶Ї»рЙсјУМШБЦЈЁНш°ЙјТНҐНЁУГ°жЈ©0224SP3.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\cf[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\au[1].htm
- %TEMP%\chen.txt
- %TEMP%\tmped.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ip[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\chian[1]
- C:\server.exe
- C:\CFУДФВёЁЦъ ·ЅїтНёКУ ОЮєуЧш Б¬їХМшФѕ ТЖ¶Ї»рЙсјУМШБЦЈЁНш°ЙјТНҐНЁУГ°жЈ©0224SP3.exe
- %TEMP%\chen.chen
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\wglala[1]
- %TEMP%\chen.juan
- %TEMP%\tmped.txt
- %TEMP%\chen.juan
- %TEMP%\chen.chen
- 'www.ch##n.cc':80
- 'www.wg##la.com':80
- 'z2##.#eb-105.com':80
- 'www.sy###tal.com':80
- 'localhost':1036
- 'localhost':1035
- 'vo#.#nfgood.com':5555
- 'q5######13.190.2008106.com':80
- www.ch##n.cc/au.htm
- www.ch##n.cc/cf.htm
- www.sy###tal.com/ip
- q5######13.190.2008106.com/cfyouyue.txt
- www.wg##la.com/
- www.ch##n.cc/
- DNS ASK www.ch##n.cc
- DNS ASK www.sy###tal.com
- DNS ASK z2##.#eb-105.com
- DNS ASK q5######13.190.2008106.com
- DNS ASK www.wg##la.com
- DNS ASK vo#.#nfgood.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''