Техническая информация
- C:\ZcomMagSubscribe-100-176.exe
- C:\ZcomMagSubscribe-100-176.exe (загружен из сети Интернет)
- <SYSTEM32>\wbem\wmiadap.exe /R /T
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- C:\ZcomMagSubscribe-100-176.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ZcomMagSubscribe-100-176[1].exe
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini в <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.h в <SYSTEM32>\wbem\Performance\WmiApRpl.h
- 'www.fe##huso.cn':80
- www.fe##huso.cn/bao/ZcomMagSubscribe-100-176.exe
- DNS ASK www.fe##huso.cn