Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Go!toolbar' = '"%PROGRAM_FILES%\Go! Toolbar\GoUpdate.exe" -o'
- <SYSTEM32>\cmd.exe /c \DelUS.bat
- <SYSTEM32>\taskkill.exe /f /im iexplore.exe
- iexplore.exe
- %PROGRAM_FILES%\Go! Toolbar\uninstall.exe
- %PROGRAM_FILES%\Go! Toolbar\GoUpdate.exe
- %PROGRAM_FILES%\Go! Toolbar\GoToolbarProc.dll
- C:\DelUS.bat
- %TEMP%\nsb2.tmp\SelfDelete.dll
- %TEMP%\nsb2.tmp\DLLWebCount.dll
- %PROGRAM_FILES%\Go! Toolbar\GoToolbar.dll
- %TEMP%\nsb2.tmp\Ischeck.dll
- %TEMP%\nsb2.tmp\img2.bmp
- %TEMP%\nsb2.tmp\addressbar.ini
- %TEMP%\nsb2.tmp\KillProcDLL.dll
- %TEMP%\instpage.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\dbgotoolbar_instchk[1].php
- %TEMP%\nsb2.tmp\Ischeck.dll
- %TEMP%\nsb2.tmp\KillProcDLL.dll
- %TEMP%\nsb2.tmp\SelfDelete.dll
- %TEMP%\nsb2.tmp\img2.bmp
- %TEMP%\instpage.ini
- %TEMP%\nsb2.tmp\addressbar.ini
- %TEMP%\nsb2.tmp\DLLWebCount.dll
- 'lo#.##sence.co.kr':80
- 'ap#.#o.co.kr':80
- 'localhost':1035
- lo#.##sence.co.kr/logexp.php?ai##################################
- ap#.#o.co.kr/updatechk/dbgotoolbar_instchk.php
- DNS ASK lo#.##sence.co.kr
- DNS ASK ap#.#o.co.kr
- ClassName: '' WindowName: ''
- ClassName: 'Indicator' WindowName: ''