Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CLSpy' = '%PROGRAM_FILES%\CLSpy\cleanspyup.exe'
- %PROGRAM_FILES%\CLSpy\SpywareInfo\MZ
- %HOMEPATH%\Desktop\Е¬ё°ЅєЖДАМ.lnk
- %HOMEPATH%\Start Menu\Е¬ё°ЅєЖДАМ.lnk
- %PROGRAM_FILES%\CLSpy\version.txt
- %PROGRAM_FILES%\CLSpy\MZ
- %PROGRAM_FILES%\CLSpy\SpywareInfo\DB_Install.txt
- %PROGRAM_FILES%\CLSpy\version.txt
- %PROGRAM_FILES%\CLSpy\SpywareInfo\DB_Install.txt
- 'up#.##eanspy.co.kr':80
- up#.##eanspy.co.krhttp://up1.cleanspy.co.kr/Install/DB/DB_Install.txt
- up#.##eanspy.co.krhttp://up1.cleanspy.co.kr/Install/DB/MZ
- up#.##eanspy.co.krhttp://up1.cleanspy.co.kr/Install/DB/
- up#.##eanspy.co.krhttp://up1.cleanspy.co.kr/Install/clspy/version.txt
- up#.##eanspy.co.krhttp://up1.cleanspy.co.kr/Install/clspy/MZ
- up#.##eanspy.co.krhttp://up1.cleanspy.co.kr/Install/clspy/
- DNS ASK up#.##eanspy.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'