Техническая информация
- '%WINDIR%\svchost.exe'
- '%WINDIR%\MathType 6.8简体中文版(加载&对象型).exe'
- '<SYSTEM32>\regsvr32.exe' /s /u ProcessProtection.dll
- iexplore.exe
- chrome.exe
- firefox.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2101' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1407' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1601' = '00000000'
- %WINDIR%\MathType 6.8简体中文版(加载&对象型).exe
- %WINDIR%\svchost.exe
- DNS ASK xx##.xxccdf.com
- DNS ASK xx#.#xccdf.com
- DNS ASK www.ip##8.com
- ClassName: '(null)' WindowName: 'Windows Internet Explorer'
- ClassName: '(null)' WindowName: '??????????????????'
- ClassName: '(null)' WindowName: 'ICBC'
- ClassName: '(null)' WindowName: '??????????????'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'Microsoft Internet Explorer'