Техническая информация
- %WINDIR%\8517_8517320307_700016.exe (загружен из сети Интернет)
- <SYSTEM32>\taskkill.exe /f /im 99Lover.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://ji####2011.3322.org
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\jiqing2011.3322[1]
- %WINDIR%\8517_8517320307_700016.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\8517_8517320307_700016[1].exe
- 'localhost':1037
- 'ji####2011.3322.org':80
- 'localhost':1034
- 'jh.#1lm.com':80
- ji####2011.3322.org/
- jh.#1lm.com/jh/8517_8517320307_700016.exe
- DNS ASK ji####2011.3322.org
- DNS ASK jh.#1lm.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''