Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SPP' = '%WINDIR%\winsxx\srnss.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\videoex] 'ImagePath' = '%WINDIR%\videoex.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\videoex] 'Start' = '00000002'
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\DelKillProc1.bat" "
- '%WINDIR%\d.exe' -install -712 -safe
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\frx4.kro[1]
- %TEMP%\temp.dat
- %WINDIR%\DelKillProc1.bat
- %WINDIR%\d.exe
- %WINDIR%\videoex.sys
- %TEMP%\temp.dat
- '10#.#.249.108':30000
- 'fr##.kro.kr':80
- 'localhost':1037
- http://fr##.kro.kr/
- DNS ASK fr##.kro.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''