Техническая информация
- '<SYSTEM32>\services.exe'
- <SYSTEM32>\services.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\api[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\api[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\api[2].php
- C:\kss.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\api[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\api[1].php
- 'yz.##vnv.com':80
- 'localhost':1041
- '12#.#25.114.144':80
- 'localhost':1037
- yz.##vnv.com/kss_api/api.php?a=######################################################
- 12#.#25.114.144/special/time/
- DNS ASK yz.##vnv.com
- DNS ASK op##.baidu.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'