Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Live' = '<SYSTEM32>\fsrun.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\readme[1].txt
- <DRIVERS>\etc\hosts
- 'vi####.hdwave.co.kr':80
- 'localhost':1038
- '18#.#8.206.230':80
- vi####.hdwave.co.kr/icones/readme.txt
- 18#.#8.206.230/Images/studioenv.php
- DNS ASK vi####.hdwave.co.kr
- '<IP-адрес в локальной сети>':1039
- ClassName: 'Indicator' WindowName: ''