Техническая информация
- '%TEMP%\nmsq3.3.exe'
- '<SYSTEM32>\regsvr32.exe' /s "%CommonProgramFiles%\system\directres.dll"
- ClassName: 'OLLYDBG' WindowName: '(null)'
- ClassName: 'FileMonClass' WindowName: '(null)'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\t9[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\getimage[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\v9r3[1].txt
- %TEMP%\use.edb
- %CommonProgramFiles%\System\directres.dll
- %TEMP%\nmsq3.3.exe
- %TEMP%\~DFA76D.tmp
- 'pt###in2.qq.com':80
- '18#e.cn':80
- 'localhost':1035
- 'www.11#6.cc':80
- 18#e.cn/v9r3.txt
- pt###in2.qq.com/getimage
- www.11#6.cc/ad/t9.html
- DNS ASK 18#e.cn
- DNS ASK pt###in2.qq.com
- DNS ASK www.11#6.cc
- ClassName: '(null)' WindowName: 'QQ????2.69 ??? ??:www.1156.cc'
- ClassName: '(null)' WindowName: 'QQ????V3.3'
- ClassName: '(null)' WindowName: 'QQ????V3.3 www.iqiqq.com'
- ClassName: '(null)' WindowName: 'QQ????2.69 ??? '
- ClassName: '18467-41' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'