Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'iexplore.exe' = 'iexplore.exe'
- '<SYSTEM32>\iexplore.exe'
- <SYSTEM32>\iexplore.exe
- <SYSTEM32>\iexplore.exe
- 'www.km##yc.com':80
- 'tm###h.com.cn':80
- www.km##yc.com/sj/hostlist80.htm
- www.km##yc.com/sj/app.htm
- tm###h.com.cn/sj/bak.htm
- DNS ASK www.km##yc.com
- DNS ASK tm###h.com.cn