Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KCPointC' = '%ProgramFiles%\KCPoint\ControlKCPoint.exe'
- '%ProgramFiles%\cffpots.exe' (загружен из сети Интернет)
- '<SYSTEM32>\mfc32.dll' (загружен из сети Интернет)
- '%ProgramFiles%\cffpots.exe'
- '<SYSTEM32>\mfc32.dll'
- %ProgramFiles%\cffpots.exe
- <SYSTEM32>\mfc32.dll
- 'www.ff##ts.net':80
- 'www.kc##int.com':80
- 'kc###dit.co.kr':80
- http://www.kc##int.com/Info/Application/KCPointD.exe
- http://www.ff##ts.net/pds/cffpots.exe
- http://kc###dit.co.kr/counter_table/counter.asp?co######
- http://www.kc##int.com/Info/Application/k.exe
- DNS ASK www.ff##ts.net
- DNS ASK www.kc##int.com
- DNS ASK kc###dit.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'WorkerW' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''