Техническая информация
- '%PROGRAM_FILES%\baiasp\setup_open_3860.exe'
- '%PROGRAM_FILES%\baiasp\UseCa_2085_S.exe'
- '%PROGRAM_FILES%\baiasp\kuping_s_50499.exe'
- '%PROGRAM_FILES%\baiasp\UseCa_2085_S.exe' (загружен из сети Интернет)
- '%PROGRAM_FILES%\baiasp\kuping_s_50499.exe' (загружен из сети Интернет)
- '%PROGRAM_FILES%\baiasp\setup_open_3860.exe' (загружен из сети Интернет)
- %PROGRAM_FILES%\baiasp\setup_open_3860.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\UseCa_2085_S[1].exe
- %PROGRAM_FILES%\baiasp\UseCa_2085_S.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\kuping_s_50499[1].exe
- %PROGRAM_FILES%\baiasp\kuping_s_50499.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\setup_open_3860[1].exe
- %PROGRAM_FILES%\baiasp\setup_open_3860.exe
- %PROGRAM_FILES%\baiasp\kuping_s_50499.exe
- %PROGRAM_FILES%\baiasp\setup_open_3860.exe
- %PROGRAM_FILES%\baiasp\kuping_s_50499.exe
- 'xz.##7080.com':80
- 'do####ad.wuji.com':80
- 'do####ad.wallba.com':80
- xz.##7080.com/download.php/UseCa_2085_S.exe
- do####ad.wuji.com/wuji/open/setup_open_3860.exe
- do####ad.wallba.com/download.php/kuping_s_50499.exe
- DNS ASK xz.##7080.com
- DNS ASK do####ad.wuji.com
- DNS ASK do####ad.wallba.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'