Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] '1201' = '00000000'
- C:\users\public\documents\360netul.dll
- C:\users\public\documents\360apploader.exe
- C:\users\public\documents\360shellpro.exe
- C:\users\public\documents\softmanager.exe
- C:\users\public\documents\360.exe
- C:\tair\1016091157918152\aaaaaaaaaaaaaa.bat
- C:\tair\2289998211548119\aaaaaaaaaaaaaa.chm
- C:\tair\1016091157918152\aaaaaaaaaaaaaa.bat
- C:\tair\2289998211548119\aaaaaaaaaaaaaa.chm
- ClassName: 'HH Parent' WindowName: 'HTML Help'
- '<SYSTEM32>\cmd.exe' /c ""C:\TAir\1016091157918152\AAAAAAAAAAAAAA.bat" "
- '<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" /v "1201" /d "0" /t REG_DWORD /f