Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'UtilZone' = '%PROGRAM_FILES%\UtilZone\UtilZone.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'UtilZone' = '"%PROGRAM_FILES%\UtilZone\UtilZone.exe"'
- %PROGRAM_FILES%\UtilZone\UtilZone.exe
- <SYSTEM32>\regsvr32.exe /s "%PROGRAM_FILES%\UtilZone\UtilZone.dll"
- <SYSTEM32>\regsvr32.exe /u /s "%PROGRAM_FILES%\FineTop\FineTop.dll"
- Библиотека-обработчик для всех процессов: %PROGRAM_FILES%\UtilZone\adc.acc
- %TEMP%\nsi2.tmp\IpConfig.dll
- %PROGRAM_FILES%\UtilZone\Uninstall.exe
- %PROGRAM_FILES%\UtilZone\ex.dat
- %TEMP%\inst.xxx
- %TEMP%\nsi2.tmp\NSISdl.dll
- %PROGRAM_FILES%\UtilZone\adc.acc
- %TEMP%\nsi2.tmp\UAC.dll
- %TEMP%\nsi2.tmp\nsProcess.dll
- %PROGRAM_FILES%\UtilZone\UtilZone.dll
- %PROGRAM_FILES%\UtilZone\Cleaner.exe
- %PROGRAM_FILES%\UtilZone\UtilZone.exe
- 'ut#####e.topguide.co.kr':80
- ut#####e.topguide.co.kr/install.asp?ve###############################################
- ut#####e.topguide.co.kr/ex.dat
- ut#####e.topguide.co.kr/update/UZ100/UtilZone.ini
- DNS ASK ut#####e.topguide.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '#32770' WindowName: ''