Technical Information
- [HKLM\Software\Classes\CLSID\{86AEFBE8-763F-0647-899C-A93278894D8E}\Shell\Open\Command] '' = '%ProgramFiles%\Internet Explorer\Iexplore.exe http://www.yy131.com/?tt'
- '%ProgramFiles%\internet explorer\iexplore.exe' http://%77%77%77%2E%79%79%31%33%31%2E%63%6F%6D/taobao/
- 'yy##1.com':80
- http://www.yy##1.com/taobao/
- DNS ASK yy##1.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- ClassName: 'Static' WindowName: ''