Техническая информация
- <SYSTEM32>\TXPlatform.exe
- %PROGRAM_FILES%\Messenger\004.exe
- %PROGRAM_FILES%\Messenger\006.exe
- <SYSTEM32>\cmd.exe /c ""%PROGRAM_FILES%\Messenger\custsat.bat" "
- <SYSTEM32>\ipconfig.exe /all
- <SYSTEM32>\runtrue.txt
- <SYSTEM32>\qqver.txt
- %PROGRAM_FILES%\Messenger\dj°ІИ«РЮёґ.url
- <SYSTEM32>\TXPlatform.exe
- <SYSTEM32>\runcount.txt
- %HOMEPATH%\Favorites\╠╘▒ж╣║╬я═°.url
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\ip138[1]
- <SYSTEM32>\macmac.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\ips[1].asp
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\15.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\temp_0.tmp
- %PROGRAM_FILES%\Messenger\Interne Explore.url
- %PROGRAM_FILES%\Messenger\custsat.bat
- %PROGRAM_FILES%\Messenger\006.exe
- %PROGRAM_FILES%\Messenger\004.exe
- %TEMP%\$inst\temp_0.tmp
- 'www.ip##8.cn':80
- 'localhost':1041
- 'www.go##80.cn':80
- 'tj.##ngyicj.com':872
- 'www.ip##8.com':80
- 'localhost':1039
- www.go##80.cn/
- www.ip##8.cn/
- www.ip##8.com/ips.asp
- DNS ASK www.ip##8.cn
- DNS ASK www.go##80.cn
- DNS ASK tj.##ngyicj.com
- DNS ASK www.ip##8.com
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: '' WindowName: 'vanjkww1askkadhiwuawa'