Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ОТµДЖф¶ЇПо' = '<SYSTEM32>\360.exe'
- '<SYSTEM32>\DK.exe'
- '<SYSTEM32>\360tyay.exe'
- ClassName: 'ollydbg' WindowName: '(null)'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\cfbingpo[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\yy[1]
- <SYSTEM32>\DK.exe
- %APPDATA%\E_UIEngine\90afea1eeb37be7a93471c36152ab43a\90afea1eeb37be7a93471c36152ab43a.jpg
- <SYSTEM32>\360tyay.exe
- <SYSTEM32>\DK.exe
- <SYSTEM32>\360tyay.exe
- 'yk.##pddos.com':1990
- 'yy.com':80
- 'www.cf###gpo.com':80
- 'localhost':1035
- 'localhost':1038
- yy.com/
- www.cf###gpo.com/
- DNS ASK yy.com
- DNS ASK yk.##pddos.com
- DNS ASK www.cf###gpo.com
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'Syser Debugger - Win32 User Mode Debugger'
- ClassName: '(null)' WindowName: 'Syser : Active Hotkey [Ctrl+F12]'
- ClassName: 'WinDbgFrameClass' WindowName: '(null)'