Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'QQNews' = '"%PROGRAM_FILES%\QQNews\QQNews.exe" /r'
- <SYSTEM32>\wbem\wmiadap.exe /R /T
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ipJson[1].jsp
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %PROGRAM_FILES%\QQNews\QQNews.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ipJson[1].jsp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ipJson[1].jsp
- 'localhost':1039
- '21#.#3.211.231':9191
- 'wh###.#conline.com.cn':80
- '61.##7.113.68':2225
- wh###.#conline.com.cn/ipJson.jsp
- DNS ASK wh###.#conline.com.cn
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''