Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ScanRegistry' = '<SYSTEM32>\1.exe'
- C:\ppva_heima0169.exe
- C:\µЪИэёцПВФШОДјю
- C:\UUSEE_heima_Setup_5007760.exe
- C:\µЪИэёцПВФШОДјю (загружен из сети Интернет)
- C:\UUSEE_heima_Setup_5007760.exe (загружен из сети Интернет)
- C:\ppva_heima0169.exe (загружен из сети Интернет)
- %WINDIR%\explorer.exe
- C:\ppva_heima0169.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ppva_heima0169[1].exe
- C:\µЪИэёцПВФШОДјю
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\se[1]
- C:\server.ini
- <SYSTEM32>\1.exe
- C:\UUSEE_heima_Setup_5007760.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\UUSEE_heima_Setup_5007760[1].exe
- 'a.#n':80
- 'mo##ayi.cn':80
- 'localhost':1036
- a.#n/se
- mo##ayi.cn/soft/ppva_heima0169.exe
- mo##ayi.cn/soft/UUSEE_heima_Setup_5007760.exe
- DNS ASK a.#n
- DNS ASK mo##ayi.cn
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'BaseBar' WindowName: 'ChanApp'
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'CSCHiddenWindow' WindowName: ''
- ClassName: 'Proxy Desktop' WindowName: ''
- ClassName: '' WindowName: 'UUSee ???????? 2008 '
- ClassName: '' WindowName: 'UUSee ???????? 2008'
- ClassName: '' WindowName: '????????'
- ClassName: '' WindowName: 'PP??????(0.2.19.0110) ???? '
- ClassName: '' WindowName: 'PP??????(0.2.19.0110) ????'