Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'debug' = '%WINDIR%\services.exe'
- '%WINDIR%\services.exe'
- %WINDIR%\services.exe
- %WINDIR%\services.exe
- '11#.#23.19.76':8080
- 'www.cf###gyun.com':80
- 'cf#####ian.blog.163.com':80
- 'localhost':1037
- 'www.lo###igua.com':80
- 'localhost':1040
- cf#####ian.blog.163.com/blog/static/229838051201503185238980/
- www.cf###gyun.com/
- www.lo###igua.com/
- DNS ASK cf#####ian.blog.163.com
- DNS ASK www.cf###gyun.com
- DNS ASK www.lo###igua.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Progman' WindowName: 'Program Manager'
- ClassName: '' WindowName: 'Microsoft Internet Explorer'
- ClassName: '' WindowName: ''