Техническая информация
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\pz[1].txt
- 'im#.#sers.51.la':80
- 'sd#.##wan321.com':80
- '12#.#25.114.144':80
- 'tt#####g.kuwan321.com':80
- im#.#sers.51.la/17620682.asp
- im#.#sers.51.la/17619306.asp
- sd#.##wan321.com/sdb.db
- 12#.#25.114.144/
- 12#.#25.114.144/special/time/
- tt#####g.kuwan321.com/chbz/pz.txt
- DNS ASK im#.#sers.51.la
- DNS ASK sd#.##wan321.com
- DNS ASK tt#####g.kuwan321.com
- DNS ASK www.ba##u.com
- DNS ASK op##.baidu.com
- ClassName: 'Shell_TrayWnd' WindowName: ''