Техническая информация
- 'C:\IQIYIsetup_l_nantong@kb009.exe'
- 'C:\IQIYIsetup_l_nantong@kb009.exe' (загружен из сети Интернет)
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- C:\IQIYIsetup_l_nantong@kb009.exe
- C:\IQIYIsetup_l_nantong@kb009.exe_0
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- C:\IQIYIsetup_l_nantong@kb009.exe_0
- 'du###ingfa.com':80
- du###ingfa.comhttp://duyidingfa.com/IQIYIsetup_l_nantong@kb009.exe
- DNS ASK du###ingfa.com