Техническая информация
- "%TEMP%\guaguadance.exe" (загружен из сети Интернет)
- %TEMP%\guaguadance.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\guaguadance_6060000044[1]
- 'c.###gua.com.cn':80
- 'localhost':1034
- c.###gua.com.cn/c/guaguadance_6060000044
- DNS ASK c.###gua.com.cn
- ClassName: '#32770' WindowName: '????'