Техническая информация
- '%WINDIR%\empty.exe' 2868
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- <Текущая директория>\Read1
- %WINDIR%\empty.exe
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\PerfStringBackup.TMP
- <Текущая директория>\Read1
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\2[1].3updata
- 'xu#.##login2.qq.com':80
- 'www.87###2894.com':80
- 'localhost':1038
- 'www.si###wlyx.com':80
- www.87###2894.com/mokuai/2.3updata
- xu#.##login2.qq.com/cgi-bin/qlogin?do#################################################################################################################################################################
- www.si###wlyx.com/gonggao.txt
- DNS ASK www.87###2894.com
- DNS ASK xu#.##login2.qq.com
- DNS ASK www.si###wlyx.com
- ClassName: 'SysIPAddress32' WindowName: ''
- ClassName: 'SysDateTimePick32' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'SysTreeView32' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'msctls_updown32' WindowName: ''
- ClassName: 'SysHeader32' WindowName: ''
- ClassName: 'ListBox' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'BUTTON' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'Microsoft Internet Explorer'
- ClassName: 'msctls_trackbar32' WindowName: ''
- ClassName: 'msctls_progress32' WindowName: ''
- ClassName: 'Edit' WindowName: ''
- ClassName: 'ComboBox' WindowName: ''