Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\graxMCO] 'Start' = '00000002'
- %TEMP%\1f24c.tmp
- <DRIVERS>\graxMCO.sys
- %TEMP%\1d1e1.tmp
- %TEMP%\1ecec.tmp
- %TEMP%\1f24c.tmp
- <DRIVERS>\graxMCO.sys
- %TEMP%\1d1e1.tmp
- %TEMP%\1ecec.tmp
- 'hi.##idu.com':80
- hi.##idu.com/yu20/blog/item/f5aef8de0cba6340ccbf1a9c.html
- DNS ASK hi.##idu.com
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''