Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\voasvc] 'Start' = '00000002'
- '%PROGRAM_FILES%\Windows VOA\voasvc.exe'
- '%PROGRAM_FILES%\Windows VOA\voacfg.exe' "-i"
- %PROGRAM_FILES%\Windows VOA\voacfg.exe
- %PROGRAM_FILES%\Windows VOA\voasvc.exe
- %PROGRAM_FILES%\Windows VOA\Uninstall.exe
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\adpatchconf[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\adpatchconf[1].php
- %TEMP%\nse2.tmp\Processes.dll
- %TEMP%\nse2.tmp\System.dll
- %TEMP%\nse2.tmp\SimpleSC.dll
- %PROGRAM_FILES%\Windows VOA\voaupdate.exe
- %PROGRAM_FILES%\Windows VOA\voaclt.exe
- %TEMP%\nse2.tmp\System.dll
- %TEMP%\nse2.tmp\SimpleSC.dll
- %TEMP%\nse2.tmp\Processes.dll
- 'vo######te.windowsnas.co.kr':80
- vo######te.windowsnas.co.kr/adlistener/adpatchconf.php?pg#######################################################################################
- vo######te.windowsnas.co.kr/adlistener/adpatchconf.php?pg########################################################################
- DNS ASK vo######te.windowsnas.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''