Техническая информация
- '<SYSTEM32>\dumprep.exe' 2816 -dm 7 7 %TEMP%\WERfe04.dir00\services.exe.hdmp 16325836412027144
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\sysdm.cpl,NoExecuteProcessException <SYSTEM32>\services.exe
- '<SYSTEM32>\services.exe'
- '<SYSTEM32>\dumprep.exe' 2816 -dm 7 7 %TEMP%\WERfe04.dir00\services.exe.mdmp 16325836412027124
- <SYSTEM32>\services.exe
- %TEMP%\WERfe04.dir00\services.exe.hdmp
- %TEMP%\WERfe04.dir00\appcompat.txt
- %TEMP%\WERfe04.dir00\manifest.txt
- %TEMP%\WERfe04.dir00\services.exe.mdmp
- %TEMP%\2d603.tmp
- %TEMP%\2dd67.tmp
- %TEMP%\2e2d6.tmp
- %TEMP%\2e2d6.tmp
- %TEMP%\2dd67.tmp
- %TEMP%\2d603.tmp
- 'www.cf###ojin.com':80
- '12#.#25.114.144':80
- www.cf###ojin.com/
- 12#.#25.114.144/new/xjp0595
- DNS ASK www.cf###ojin.com
- DNS ASK hi.##idu.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'