Техническая информация
- %TEMP%\CF°¬ёс.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1400' = '0'
- %APPDATA%\E_UIEngine\dba16cc606a8f9a863cde4d744243e12\dba16cc606a8f9a863cde4d744243e12.jpg.data
- %APPDATA%\E_UIEngine\dba16cc606a8f9a863cde4d744243e12\dba16cc606a8f9a863cde4d744243e12.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\5c9290d8ec76dfbdcc116622[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\g[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\t[1].htm
- %TEMP%\CF°¬ёс.exe
- %APPDATA%\E_UIEngine\90afea1eeb37be7a93471c36152ab43a\90afea1eeb37be7a93471c36152ab43a.jpg.data
- %APPDATA%\E_UIEngine\90afea1eeb37be7a93471c36152ab43a\90afea1eeb37be7a93471c36152ab43a.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\t[1].htm
- 'hi.##idu.com':80
- '91##wg.com':80
- 'localhost':1035
- hi.##idu.com/%B0%B2%BB%EA%C7%FAanhunqu/blog/item/5c9290d8ec76dfbdcc116622.html
- 91##wg.com/g.htm
- 91##wg.com/t.htm
- DNS ASK hi.##idu.com
- DNS ASK 91##wg.com
- '<IP-адрес в локальной сети>':1036
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''