Техническая информация
- %WINDIR%\Temp\lsass.EXE
- %WINDIR%\Temp\lsass.EXE (загружен из сети Интернет)
- [<HKCU>\Software\Microsoft\MessengerService]
- %WINDIR%\system\88E6680F.txt
- %WINDIR%\Temp\lsass.EXE
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\security[1].crt
- '74.##5.232.51':25
- 'vi####mgolf.co.kr':80
- 'localhost':1036
- vi####mgolf.co.kr/uploadfile/notice/%20/security.crt
- DNS ASK gs####85.google.com
- DNS ASK vi####mgolf.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'Windows Vista'