Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\yuankong.lnk
- '%TEMP%\uninst.exe'
- '%TEMP%\~nsu.tmp\Au_.exe' _?=%TEMP%\
- '%TEMP%\server.exe'
- '<SYSTEM32>\helpen.exe'
- '<SYSTEM32>\ping.exe' -n 6 127.0.0.1
- '<SYSTEM32>\cmd.exe' /c %TEMP%\xytp.bat
- %TEMP%\nsh2.tmp\System.dll
- %TEMP%\xytp.bat
- %TEMP%\temp.ini
- %TEMP%\~nsu.tmp\Au_.exe
- %TEMP%\uninst.exe
- %TEMP%\wmxd.ini
- %TEMP%\server.exe
- <SYSTEM32>\wmxd.ini
- %TEMP%\xy.ini
- <SYSTEM32>\helpen.exe
- %TEMP%\temp.ini
- %TEMP%\server.exe
- %TEMP%\nsh2.tmp\System.dll
- %TEMP%\uninst.exe
- 'st####eo.3322.org':1314
- DNS ASK st####eo.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'