Техническая информация
- '%TEMP%\Update.exe'
- '%TEMP%\nmsq.exe'
- '<SYSTEM32>\regsvr32.exe' /s "%CommonProgramFiles%\System\flash10.dll"
- ClassName: 'OLLYDBG' WindowName: '(null)'
- ClassName: 'FileMonClass' WindowName: '(null)'
- %CommonProgramFiles%\System\flash10.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\getimage[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ver3[1].txt
- %TEMP%\Update.exe
- %TEMP%\nmsq.exe
- %TEMP%\use.edb
- %TEMP%\~DF1951.tmp
- %TEMP%\~DF872B.tmp
- 'www.18#e.cn':80
- 'pt###in2.qq.com':80
- www.18#e.cn/ver3.txt
- pt###in2.qq.com/getimage
- DNS ASK www.18#e.cn
- DNS ASK pt###in2.qq.com
- ClassName: '(null)' WindowName: 'QQ??????V2.4 www.movieokok.cn'
- ClassName: '(null)' WindowName: 'QQ??????V2.4'
- ClassName: '(null)' WindowName: '??QQ?? QQ:357493825 ??:www.1156.cc'
- ClassName: '18467-41' WindowName: '(null)'
- ClassName: '(null)' WindowName: '??QQ?? ??:www.1156.cc'