Техническая информация
- <SYSTEM32>\cmd.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\tn[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\xz[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\t[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\shen[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\shen1[1].html
- 'www.cf###nlian.com':80
- 'cf##m.com':80
- 'ms##18.com':80
- 'localhost':1036
- 'i.##hu.com':80
- www.cf###nlian.com/t.html
- cf##m.com/tn.html
- cf##m.com/xz.html
- i.##hu.com/p/=v2=eMNxcjNATzczTNM0MzMuY29t/blog/view/209528807.htm
- ms##18.com/shen.html
- ms##18.com/shen1.html
- DNS ASK www.cf###nlian.com
- DNS ASK cf##m.com
- DNS ASK i.##hu.com
- DNS ASK ms##18.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'