Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\69B6fx6uM] 'Start' = '00000001'
- <SYSTEM32>\5F84oEMBw.systmp
- <SYSTEM32>\MakeAtManage.sys
- <SYSTEM32>\69B6fx6uM.sys
- <SYSTEM32>\5F84oEMBw.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ddhh[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\mine[1]
- <SYSTEM32>\5F84oEMBw.sys
- <SYSTEM32>\5F84oEMBw.systmp в <SYSTEM32>\5F84oEMBw.sys
- 'localhost':1041
- 't.##.com':80
- '99#######fz.stor.sinaapp.com':80
- t.##.com/sddosas/mine
- 99#######fz.stor.sinaapp.com/O/ddhh.txt
- DNS ASK zh###.#0.upaiyun.com
- DNS ASK mf.#2fz.com
- DNS ASK my.##years.com
- DNS ASK 99#######fz.stor.sinaapp.com
- DNS ASK t.##.com
- DNS ASK bu########uding.stor.sinaapp.com
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'