Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] '1201' = '00000000'
- C:\users\public\documents\360apploader.exe
- C:\users\public\documents\uninst.exe
- C:\users\public\documents\360safe.exe
- C:\users\public\documents\360.exe
- C:\airgd\4891287075648632\aaaaaaaaaaaaaa.bat
- C:\airgd\6031420050923229\aaaaaaaaaaaaaa.chm
- C:\airgd\4891287075648632\aaaaaaaaaaaaaa.bat
- C:\airgd\6031420050923229\aaaaaaaaaaaaaa.chm
- ClassName: 'HH Parent' WindowName: 'HTML Help'
- '<SYSTEM32>\cmd.exe' /c ""C:\AirGD\4891287075648632\AAAAAAAAAAAAAA.bat" "
- '<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0" /v "1201" /d "0" /t REG_DWORD /f