Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MicroService' = '<SYSTEM32>\<Имя вируса>.exe'
- <SYSTEM32>\<Имя вируса>.exe
- 'kr#####akesystem.co.kr':80
- kr#####akesystem.co.kr/jisik/v.asp
- DNS ASK kr#####akesystem.co.kr
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: '?????????? ??????'
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: '' WindowName: 'Windows ???? ??????'