Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<Полный путь к вирусу>' = '<Полный путь к вирусу>:*:Enabled:360安全中心'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\!@tB38.tmp
- %TEMP%\3601.tmp360net.dll
- %TEMP%\3602.tmpsafe505.dll
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\!@tB38.tmp
- 'pi###.360.cn':80
- '12#.#38.243.54':80
- 's.##0.cn':80
- 'localhost':1039
- pi###.360.cn/360safe/bd_oemqd27.cab?va#########
- s.##0.cn/safe/instcomp.htm?so###########################################################################
- DNS ASK tr.#.360.cn
- DNS ASK st####.sipphone.com
- DNS ASK ag#.#.360.cn
- DNS ASK s.##0.cn
- DNS ASK st.#.360.cn
- DNS ASK pi###.360.cn
- 'tr.#.360.cn':80
- 'st.#.360.cn':3478
- ClassName: 'Shell_TrayWnd' WindowName: ''