Техническая информация
- %TEMP%\dap\~D!7892.tmp
- %TEMP%\~EE54s8.tmp
- %TEMP%\yiyi.exe
- %TEMP%\dap\~EE5WE8.tmp
- %TEMP%\~EE54s8.tmp (загружен из сети Интернет)
- %TEMP%\dap\~EE5WE8.tmp (загружен из сети Интернет)
- %TEMP%\dap\~D!7892.tmp (загружен из сети Интернет)
- <SYSTEM32>\rundll32.exe url.dll,FileProtocolHandler http://www.32##nf.com/
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\svchost.exe
- %TEMP%\dap\~EE5WE8.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\1234[1].bin
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\3456[1].bin
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\321dnf[1]
- %TEMP%\dap\~D!7892.tmp
- %TEMP%\yiyi.dll
- %TEMP%\yiyi.exe
- %TEMP%\sec.dll
- %TEMP%\~EE54s8.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\638[1].exe
- %TEMP%\sec.dll
- %TEMP%\yiyi.exe
- %TEMP%\yiyi.dll
- 'localhost':1040
- 'www.32##nf.com':80
- 'www.77##nf.cn':80
- 'localhost':1036
- '22#.#86.31.101':80
- www.77##nf.cn/yiyi/3456.bin
- www.32##nf.com/
- 22#.#86.31.101/NewSystem/nini1/638.exe
- www.77##nf.cn/yiyi/1234.bin
- DNS ASK www.32##nf.com
- DNS ASK www.77##nf.cn
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''