Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] 'C:\\Stub_Krypted.exe' = 'C:\\Stub_Krypted.exe:*:Enabled:@xpsp2res.dll,-22019'
- C:\adrive.exe
- C:\Stub_Krypted.exe
- C:\adrive.exe
- C:\Stub_Krypted.exe
- 'ne####.dothome.co.kr':80
- 'localhost':1036
- ne####.dothome.co.kr/version1.txt
- DNS ASK ne####.dothome.co.kr
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''