Техническая информация
- ClassName: 'Filemonclass' WindowName: '(null)'
- ClassName: 'Regmonclass' WindowName: '(null)'
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\Preferred
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\411cc48e59471d2e0370eb9a00a65cd7_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\9d124bf7-f0e8-4f2b-b371-f7a2d01eef1a
- <SYSTEM32>\d3d9caps.dat
- <SYSTEM32>\d3d9caps.tmp
- <SYSTEM32>\d3d9caps.dat
- <SYSTEM32>\d3d9caps.tmp в <SYSTEM32>\d3d9caps.dat
- 'no##.youdao.com':80
- '11#.#8.34.62':1986
- no##.youdao.com/yws/public/note/e34e2e94430deded6d202c6b0f6de0cc
- DNS ASK no##.youdao.com
- ClassName: 'SysListView32' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '4823-00000029' WindowName: '(null)'
- ClassName: '18467-41' WindowName: '(null)'