Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '' = '%PROGRAM_FILES%\Internet Explorer\smss.exe'
- %PROGRAM_FILES%\NetMeeting\downwho.gif
- %PROGRAM_FILES%\NetMeeting\_oprat.pif
- %PROGRAM_FILES%\NetMeeting\_default.pif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\qq[1].txt
- %PROGRAM_FILES%\Internet Explorer\smss.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\q[1]
- %PROGRAM_FILES%\NetMeeting\Isinter.gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\qq[1].txt
- %PROGRAM_FILES%\NetMeeting\downwho.gif
- %PROGRAM_FILES%\NetMeeting\Isinter.gif
- 'www.la##ing.net':80
- '12#.#25.114.144':80
- 'localhost':1036
- www.la##ing.net/qq.txt
- 12#.#25.114.144/checkuser/q
- DNS ASK www.la##ing.net
- DNS ASK pa#####tso.baidu.com