Техническая информация
- '%WINDIR%\setup_yz002_000012.exe'
- '%WINDIR%\p3_k900100_bn9g8WQskOJFmD2NZ1_v14.2.1.exe'
- '%WINDIR%\setup_yz002_000012.exe' (загружен из сети Интернет)
- '%WINDIR%\p3_k900100_bn9g8WQskOJFmD2NZ1_v14.2.1.exe' (загружен из сети Интернет)
- '<SYSTEM32>\wscript.exe' "%WINDIR%\ha.vbs"
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\setup_yz002_000012[1].exe
- %WINDIR%\setup_yz002_000012.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\2345[1]
- %WINDIR%\ha.vbs
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\p3_k900100_bn9g8WQskOJFmD2NZ1_v14.2.1[1].exe
- %WINDIR%\p3_k900100_bn9g8WQskOJFmD2NZ1_v14.2.1.exe
- 'www.du##.com':80
- 'www.tt##23.cn':80
- 'www.23##.com':80
- 'localhost':1035
- 'mo####.500yun.com':80
- 'localhost':1038
- www.23##.com/?k9#####
- mo####.500yun.com/jm/setup_yz002_000012.exe
- mo####.500yun.com/jm/p3_k900100_bn9g8WQskOJFmD2NZ1_v14.2.1.exe
- DNS ASK www.tt##23.cn
- DNS ASK www.23##.com
- DNS ASK mo####.500yun.com
- DNS ASK www.du##.com
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'IEFrame' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'