Техническая информация
- %PROGRAM_FILES%\360Safe\LSPFix.exe
- <SYSTEM32>\cmd.exe /c """%TEMP%\Del.bat"" "
- <SYSTEM32>\ntvdm.exe -f -i1
- %WINDIR%\Temp\scs1.tmp
- %WINDIR%\Temp\scs2.tmp
- %TEMP%\Del.bat
- %PROGRAM_FILES%\360Safe\360safe.exe
- %PROGRAM_FILES%\360Safe\LSPFix.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\count[1].asp
- %WINDIR%\Temp\scs2.tmp
- %PROGRAM_FILES%\360Safe\LSPFix.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\count[1].asp
- %WINDIR%\Temp\scs1.tmp
- 'pp###.#16.19821122.com':80
- pp###.#16.19821122.com/count.asp
- DNS ASK pp###.#16.19821122.com
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-aec.af0.390001'