Техническая информация
- 'C:\fyjm_166_1927.exe'
- 'C:\fyjm_166_1927.exe' (загружен из сети Интернет)
- '<SYSTEM32>\wscript.exe' "%TEMP%\1.tmp\123.VBS"
- '<SYSTEM32>\ping.exe' -n 3 127.0.0.1
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\setup.bat" "
- C:\fyjm_166_1927.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\mmtv_1850_1927_hd[1].exe
- C:\nuonuo_100043_15901_setup.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\fyjm[1].exe
- %TEMP%\1.tmp\setup.bat
- %TEMP%\1.tmp\123.VBS
- %TEMP%\1.tmp\www.gg1z.com-CF№Т№ТТ»Чеґ°їЪ»Ї1.6.rar
- 'do##.jsdwz.com':80
- 'ls###.#0.upaiyun.com':80
- 'localhost':1036
- do##.jsdwz.com/mmtv_1850_1927_hd.exe
- ls###.#0.upaiyun.com/fyjm.exe?_u####################
- DNS ASK do##.jsdwz.com
- DNS ASK ls###.#0.upaiyun.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'