Техническая информация
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.17##hcs.cn/cj/pz/tj4.htm
- <SYSTEM32>\reg.exe Delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs" /F
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.52##y.com
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.17##hcs.cn/clcount/countzwf72.asp?ac######################################### XP&ip=222&lianmeng=113
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\52xdy[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\countzwf72[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\tj4[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\dz4[1].txt
- %WINDIR%\system\test.txt
- %TEMP%\~DFC422.tmp
- %WINDIR%\system\test.txt
- 'localhost':1042
- 'www.17##hcs.cn':80
- 'localhost':1044
- 'www.52##y.com':80
- 'localhost':1036
- 'localhost':1037
- 'bt#.#qzone.net':80
- www.17##hcs.cn/clcount/countzwf72.asp?ac##################################################################
- www.17##hcs.cn/cj/pz/tj4.htm
- bt#.#qzone.net/post/c_editor/pz/dz4.txt
- www.52##y.com/
- DNS ASK www.17##hcs.cn
- DNS ASK www.52##y.com
- DNS ASK bt#.#qzone.net
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''