Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{0DE5DB62-AE7D-E7FE-5C5B-69C8A8C2A44E}] 'stubpath' = ''
- <SYSTEM32>\reg.exe delete "HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{0DE5DB62-AE7D-E7FE-5C5B-69C8A8C2A44E}" /f
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\opaoxf2[1]
- <SYSTEM32>\V3Medic.exe
- 'bl##.daum.net':80
- bl##.daum.net/xml/rss/opaoxf2
- DNS ASK bl##.daum.net