Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\ПµНі№Шјь·юОс] 'Start' = '00000002'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\ie[1].txt
- C:\list.txt
- %WINDIR%\explorer.log
- %WINDIR%\svchost.exe
- C:\list.txt
- '<Private IP address>':80
- 'www.70##g.com':80
- 'wa#####1117.w98.7ga.net':80
- '<Private IP address>':445
- '<Private IP address>':139
- 'localhost':1039
- wa#####1117.w98.7ga.net/ie.txt
- www.70##g.com/zhuanqian/Count.asp?ve##############################
- DNS ASK wa#####1117.w98.7ga.net
- DNS ASK www.70##g.com
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '#32770' WindowName: ''
- ClassName: '#32770' WindowName: 'Windows ??????????'