Техническая информация
- "%CommonProgramFiles%\manlhui.exe" (загружен из сети Интернет)
- <SYSTEM32>\cmd.exe /c "%CommonProgramFiles%\suoyouxins.bat"
- %CommonProgramFiles%\ppna.txt
- %CommonProgramFiles%\done.txt
- %CommonProgramFiles%\suoyouxins.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\oRun[1].exe
- %CommonProgramFiles%\hutuuu.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\count[1].asp
- 'xx#.##odaita.com':80
- 'mt##.#aitou3.com':80
- 'localhost':1036
- xx#.##odaita.com/count.asp?id#########################################
- mt##.#aitou3.com/x0606/game032/oRun.exe
- DNS ASK xx#.##odaita.com
- DNS ASK mt##.#aitou3.com