Technical Information
- [<HKLM>\SOFTWARE\Classes\htb\shell\open\command] '' = 'IEXPLORE.EXE http://taobao.loliso.com/?1121'
- [<HKLM>\SOFTWARE\Classes\h35\shell\open\command] '' = 'IEXPLORE.EXE http://www.35yes.com/?1121'
- [<HKLM>\SOFTWARE\Classes\hli\shell\open\command] '' = 'IEXPLORE.EXE http://www.loliso.com/?1121'
- [<HKLM>\SOFTWARE\Classes\hdh\shell\open\command] '' = 'IEXPLORE.EXE http://www.henbucuo.com/?1121'
- [<HKLM>\SOFTWARE\Classes\hyx\shell\open\command] '' = 'IEXPLORE.EXE http://www.d91d.com/?1121'
- [<HKLM>\SOFTWARE\Classes\hpf\shell\open\command] '' = 'IEXPLORE.EXE http://www.piaofang.net/?1121'
- %PROGRAM_FILES%FGMT24.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://dl.###link.cn:1287/CPAdown/vplay.php
- %PROGRAM_FILES%FGMT24.exe
- %CommonProgramFiles%\d.ico
- %CommonProgramFiles%\t.ico
- %PROGRAM_FILES%FGMT24.exe
- %CommonProgramFiles%\d.ico
- %CommonProgramFiles%\t.ico
- 'dl.##nlink.cn':1287
- 'localhost':1038
- DNS ASK dl.##nlink.cn
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''