Техническая информация
- "%TEMP%\PPTV(pplive)_forsp_0010.exe" (загружен из сети Интернет)
- %TEMP%\PPTV(pplive)_forsp_0010.exe
- %TEMP%\rfw1416456.exe
- %TEMP%\7_zipchs4.40.exe
- %TEMP%\nsi2.tmp\NSISdl.dll
- 'rs######ad.rising.com.cn':80
- 'do####ad.pplive.com':80
- rs######ad.rising.com.cn/for_down/rsfree2011/rfwflm/rfw1416456.exe
- do####ad.pplive.com/PPTV(pplive)_forsp_0010.exe
- DNS ASK rs######ad.rising.com.cn
- DNS ASK do####ad.pplive.com