Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\w32time] 'Start' = '00000002'
- '<SYSTEM32>\w32time.exe' -k
- '%TEMP%\~df1.tmp'
- <SYSTEM32>\w32time.exe
- %WINDIR%\Temp\~Desd54632.tmp
- %TEMP%\~df3.tmp
- %TEMP%\~df1.tmp
- %TEMP%\~df2.tmp
- 'www.cl###ale.co.kr':80
- www.cl###ale.co.kr/upload/design/body_bg.gif
- DNS ASK www.cl###ale.co.kr