Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'UpdateAdImageware' = '"%PROGRAM_FILES%\AdImageware\UpdateAdImageware.exe"'
- %PROGRAM_FILES%\AdImageware\UpdateAdImageware.exe
- <SYSTEM32>\UninstallAdImageware.exe
- 'il###er.co.kr':80
- il###er.co.kr/setupADImage/UpdateAdImageware.exe
- il###er.co.kr/setupADImage/UninstallAdImageware.exe
- il###er.co.kr/php/vrs_adimage/vrs.php
- DNS ASK il###er.co.kr