Техническая информация
- %PROGRAM_FILES%\Microsoft 2000\Hijack.exe
- <SYSTEM32>\taskkill.exe /f /pid 2700
- <SYSTEM32>\taskkill.exe /f /pid 2656
- %TEMP%\download.html
- %PROGRAM_FILES%\Microsoft 2000\Hijack.exe
- %PROGRAM_FILES%\Microsoft 2000\Hijack.bat
- %PROGRAM_FILES%\Microsoft 2000\Hijack.bat в %PROGRAM_FILES%\Microsoft 2000\Hijack.com
- 'www.qi##ee.com':80
- 'localhost':1036
- 'localhost':1035
- www.qi##ee.com/act/1.html
- DNS ASK www.qi##ee.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''