Техническая информация
- %CommonProgramFiles%\svchost.exe
- <SYSTEM32>\netsh.exe advfirewall firewall add rule name="AppData" protocol=TCP dir =out action=allow
- %CommonProgramFiles%\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Mswinsck[1].ocx
- <SYSTEM32>\mswinsck.ocx
- %CommonProgramFiles%\svchost.exe
- 'pd###.egloos.com':80
- 'localhost':1038
- 'im##st.kr':80
- pd###.egloos.com/pds/201201/16/97/Mswinsck.ocx
- DNS ASK pd###.egloos.com
- DNS ASK im##st.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''