Техническая информация
- <SYSTEM32>\cmd.exe
- C:\kss.ini
- %TEMP%\j8556.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\mini[2].swf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\mini[1].swf
- %TEMP%\j8556.sys
- 'vi#.#cc8.com':80
- 'yy.com':80
- 'localhost':1039
- 'localhost':1040
- yy.com/s/1018/2305702584/mini.swf
- vi#.#cc8.com/kss_api/api.php?a=#######################################################
- DNS ASK yy.com
- DNS ASK vi#.#cc8.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''