Техническая информация
- '%TEMP%\xyjsq.exe'
- '%TEMP%\Ver1.tmp' 67258960_2014/3.7540.21020/2 startinstall
- '%TEMP%\xunyou.exe'
- %TEMP%\xyjsq.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\vip[1].txt
- %WINDIR%\WnUninst.ini
- %TEMP%\xunyou.exe
- %TEMP%\Ver1.tmp
- %TEMP%\xyjsq.exe в %TEMP%\143859\...\TemporaryFile
- %TEMP%\xyjsq.exe
- 'tp.##jjw.net':80
- '12##.ip138.com':80
- http://tp.##jjw.net/vip.txt
- http://12##.ip138.com/ic.asp
- DNS ASK tp.##jjw.net
- DNS ASK in######tatistic.xunyou.com
- DNS ASK 12##.ip138.com
- 'in######tatistic.xunyou.com':8020
- 'in######tatistic.xunyou.com':9220
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''