Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\lwtsvc] 'Start' = '00000002'
- %PROGRAM_FILES%\LemonWebtoon\lwtsvc.exe
- %TEMP%\Setup_LWTaz.exe /P=bund01
- <SYSTEM32>\cmd.exe /c <Текущая директория>\nswssDelete.bat
- %PROGRAM_FILES%\LemonWebtoon\lwtsvc.exe
- %PROGRAM_FILES%\LemonWebtoon\lwtupt.exe
- %PROGRAM_FILES%\LemonWebtoon\LemonWebtoon.exe
- %PROGRAM_FILES%\LemonWebtoon\LemonWebtoonC.exe
- %TEMP%\nsx4.tmp\nsiswss.dll
- %PROGRAM_FILES%\LemonWebtoon\Uninstall.exe
- %PROGRAM_FILES%\LemonWebtoon\LemonWebtoon.ico
- %TEMP%\nsx4.tmp\SimpleSC.dll
- %TEMP%\Setup_LWTaz.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bund[1].html
- %TEMP%\nst2.tmp\nsismanwd.dll
- %TEMP%\nst2.tmp\nsiswss.dll
- %TEMP%\nsx4.tmp\nsProcess.dll
- %TEMP%\nsx4.tmp\ScrollLicense.dll
- <Текущая директория>\nswssDelete.bat
- %TEMP%\nst2.tmp\nsiswss.dll
- %TEMP%\nst2.tmp\nsismanwd.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bund[1].html
- 'lo####.#emonwebtoon.co.kr':80
- lo####.#emonwebtoon.co.kr/div/bund.html
- lo####.#emonwebtoon.co.kr/logger.php
- DNS ASK lo####.#emonwebtoon.co.kr