Техническая информация
- "%TEMP%\doyo_setup_1007_0821.exe" (загружен из сети Интернет)
- "%TEMP%\cps.exe" (загружен из сети Интернет)
- <SYSTEM32>\msiexec.exe /V
- <SYSTEM32>\msiexec.exe /i ""%TEMP%\kws_install.msi"" /quiet
- %TEMP%\cps.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\doyo_setup_1007_0919[1].exe
- %TEMP%\doyo_setup_1007_0821.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\KWSInstall[1].msi
- %TEMP%\kws_install.msi
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\cps[1].exe
- 'www.xu###i100.com':80
- 'so##.doyo.cn':80
- 'localhost':1035
- 'kw#.6gg.cn':80
- so##.doyo.cn/soft/doyo_setup_1007_0919.exe
- www.xu###i100.com/msn/software/partner/2m/cps.exe
- kw#.6gg.cn/KWSInstall.msi
- DNS ASK so##.doyo.cn
- DNS ASK www.xu###i100.com
- DNS ASK kw#.6gg.cn