Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Please Input Service Name] 'Start' = '00000002'
- C:\БѕЗХёЕЕ©·О[1АОАЪ].exe
- <Текущая директория>\Delete.exe
- C:\ЅЗЗаЗПёй ЅГАЫ.exe
- C:\ЅЗЗа[1АОАЪ].exe
- <SYSTEM32>\svchost.exe -k netsvcs
- %WINDIR%\FileName.jpg
- C:\Net-Temp.ini
- <Текущая директория>\123.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\patcher.xe[1]
- <Текущая директория>\Delete.exe
- C:\NT_Path.old
- C:\ЅЗЗа[1АОАЪ].exe
- C:\ЅЗЗаЗПёй ЅГАЫ.exe
- C:\БѕЗХёЕЕ©·О[1АОАЪ].exe
- %WINDIR%\temp2041600.dll
- %WINDIR%\temp1062000.dll
- <Текущая директория>\123.txt
- C:\Net-Temp.ini
- 'pa###er.xe.to':80
- 'localhost':1037
- 'wi####.dothome.co.kr':80
- pa###er.xe.to/
- wi####.dothome.co.kr/bbs/view.php?id########################################################################################################################
- DNS ASK pa###er.xe.to
- DNS ASK wi####.dothome.co.kr
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'AutoHotkey' WindowName: 'C:\??????????[1????].exe'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'AutoHotkey' WindowName: '<Текущая директория>\Delete.exe'