Техническая информация
- %WINDIR%\Tasks\Goorma Task.job
- %HOMEPATH%\Start Menu\Programs\Startup\±ёёЈё¶.lnk
- %PROGRAM_FILES%\Goorma\SetGoormaTask.exe
- %PROGRAM_FILES%\Goorma\SendModule.exe Get http://www.go###a.co.kr/desk/interface.php 1 winky
- %PROGRAM_FILES%\Goorma\Goorma_winky.exe
- %PROGRAM_FILES%\Goorma\WPUpdater.exe
- %PROGRAM_FILES%\Goorma\CheckLive.exe
- %PROGRAM_FILES%\Goorma\Uninstall.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\interface[1].php
- %TEMP%\nsw2.tmp\ExecDos.dll
- %HOMEPATH%\Start Menu\Programs\±ёёЈё¶\±ёёЈё¶.lnk
- %TEMP%\nsw2.tmp\modern-header.bmp
- %TEMP%\nsw2.tmp\UAC.dll
- %TEMP%\nsw2.tmp\KillProcDLL.dll
- %PROGRAM_FILES%\Goorma\SendModule.exe
- %PROGRAM_FILES%\Goorma\DeleteTask.exe
- %PROGRAM_FILES%\Goorma\SetGoormaTask.exe
- %PROGRAM_FILES%\Goorma\MiniSearchWidget.swf
- %TEMP%\nsw2.tmp\modern-header.bmp
- %TEMP%\nsw2.tmp\UAC.dll
- %TEMP%\nsw2.tmp\KillProcDLL.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\interface[1].php
- %TEMP%\nsw2.tmp\ExecDos.dll
- 'www.go###a.co.kr':80
- www.go###a.co.kr/desk/interface.php?ma####################################
- DNS ASK www.go###a.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '#32770' WindowName: ''