Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'iAD_' = '%WINDIR%\svchost.exe'
- %WINDIR%\Tasks\SA.DAT
- '%WINDIR%\MaxUpdate.dat' "/update now" svchost.exe
- '%WINDIR%\svchost.exe'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\svchost.exe' -k rpcss
- <SYSTEM32>\svchost.exe
- %WINDIR%\MaxUpdate.dat
- %WINDIR%\Update.dat
- %WINDIR%\iADMd5.ini
- %WINDIR%\Temp\GameAd.exe
- %WINDIR%\iADGameUrl.xml
- %WINDIR%\iADConfig.ini
- %WINDIR%\svchost.exe
- %WINDIR%\iAD.ini
- %WINDIR%\iADGame.log
- %WINDIR%\iADMd5.ini
- %WINDIR%\iADGameUrl.xml
- %WINDIR%\MaxUpdate.dat
- %WINDIR%\Update.dat
- %WINDIR%\Temp\GameAd.exe
- %WINDIR%\Temp\Perflib_Perfdata_7e8.dat
- 'do####l.jiajiaee.cn':80
- do####l.jiajiaee.cn/iepop/update/Update.tmp
- do####l.jiajiaee.cn/iepop/list/NewgameFileMd5.txt
- do####l.jiajiaee.cn/iepop/list/NewGameUrl.xml
- do####l.jiajiaee.cn/iepop/update/Update.dat
- DNS ASK do####l.jiajiaee.cn
- ClassName: 'MS_WINHELP' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'