Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Window Smart' = '%PROGRAM_FILES%\WindowSmart\smartwindow.exe'
- %PROGRAM_FILES%\WindowSmart\smartwindow.exe (загружен из сети Интернет)
- <SYSTEM32>\cmd.exe /c \smicd.bat
- %PROGRAM_FILES%\WindowSmart\smartwindow.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\su[1].htm
- C:\smicd.bat
- %PROGRAM_FILES%\WindowSmart\uninstall.exe
- %PROGRAM_FILES%\WindowSmart\smartwindow.exe
- %PROGRAM_FILES%\WindowSmart\smartwindowvw1.exe
- %PROGRAM_FILES%\WindowSmart\smartwindowvw2.exe
- 'do######.smartwindow.co.kr':80
- 'lo#.###rtwindow.co.kr':80
- do######.smartwindow.co.kr/app/smartwindowvw2.exe
- do######.smartwindow.co.kr/app/uninstall.exe
- do######.smartwindow.co.kr/app/smartwindow.exe
- do######.smartwindow.co.kr/app/smartwindowvw1.exe
- lo#.###rtwindow.co.kr/su.php
- DNS ASK do######.smartwindow.co.kr
- DNS ASK lo#.###rtwindow.co.kr