Техническая информация
- <SYSTEM32>\cmd.exe /c \DelUS.bat
- %TEMP%\nsv2.tmp\SelfDelete.dll
- C:\DelUS.bat
- %TEMP%\nsv2.tmp\DLLWebCount.dll
- %TEMP%\smartfindinst.exe
- %TEMP%\nsv2.tmp\SelfDelete.dll
- %TEMP%\nsv2.tmp\DLLWebCount.dll
- 'www.sm###find.co.kr':80
- '22#.#22.140.75':80
- www.sm###find.co.kr/SmartFind/p11072101/Nversion.php
- 22#.#22.140.75/request/count.php?mo########################
- www.sm###find.co.kr/SmartFind/ChkInst.php
- DNS ASK www.sm###find.co.kr
- ClassName: 'MS_WINHELP' WindowName: ''