Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\CFSRV] 'Start' = '00000002'
- '%APPDATA%\CleanFree\cfsrv.exe' i
- '%APPDATA%\CleanFree\cfset.exe'
- %APPDATA%\CleanFree\cfuninst.exe
- %TEMP%\nsp2.tmp\System.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\install[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\install[1].xml
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\install[1].xml
- %APPDATA%\CleanFree\cfset.exe
- %TEMP%\nsp2.tmp\KillProcDLL.dll
- %APPDATA%\CleanFree\cfsrv.exe
- %APPDATA%\CleanFree\cfunset.exe
- %APPDATA%\CleanFree\cfup.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\install[1].xml
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\install[1].xml
- %TEMP%\nsp2.tmp\KillProcDLL.dll
- %TEMP%\nsp2.tmp\System.dll
- 'fi##.#lean-free.kr':80
- 'localhost':1037
- 'ct#.##ean-free.kr':80
- fi##.#lean-free.kr/cleanfree/xml/install.xml
- ct#.##ean-free.kr/install.php?ma####################################
- DNS ASK fi##.#lean-free.kr
- DNS ASK ct#.##ean-free.kr