Техническая информация
- '%WINDIR%\csrss.exe'
- 'C:\auto tweet.exe'
- 'C:\csrss.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- ClassName: '' WindowName: 'Process Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- ClassName: '' WindowName: 'Registry Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'RegmonClass' WindowName: ''
- ClassName: '' WindowName: 'File Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'GBDYLLO' WindowName: ''
- ClassName: 'OLLYDBG' WindowName: ''
- ClassName: 'FilemonClass' WindowName: ''
- ClassName: 'pediy06' WindowName: ''
- %WINDIR%\csrss.exe
- C:\csrss.exe
- C:\auto tweet.exe
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\~DF643D.tmp
- 'tl#####h3.dothome.co.kr':80
- tl#####h3.dothome.co.kr/tweet/1.txt
- DNS ASK tl#####h3.dothome.co.kr
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: '18467-41' WindowName: ''