Техническая информация
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\docu[1].exe
- %WINDIR%\system\system32.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\registro[1].dll
- %WINDIR%\winlogon.dll
- 'wi####garden.co.kr':80
- 'me######do001.tempsite.ws':80
- wi####garden.co.kr/board/latest_skin/nzero/docu.exe
- me######do001.tempsite.ws/new/registro.dll
- DNS ASK wi####garden.co.kr
- DNS ASK me######do001.tempsite.ws