Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'FileOcean' = '%PROGRAM_FILES%\Fileocean\fileoceandn.exe'
- %PROGRAM_FILES%\Fileocean\oceanfiledn.exe 130218_ѕЯїХ_11Иё; http://www.en####imit.co.kr/drama/599658
- %PROGRAM_FILES%\Fileocean\Uninstall.ini
- %PROGRAM_FILES%\Fileocean\Uninstall.exe
- %PROGRAM_FILES%\Fileocean\fileoceandn.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\oceanfile[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\stlink[1].php
- %PROGRAM_FILES%\Fileocean\oceanfiledn.exe
- <SYSTEM32>\INETKO.DLL
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- <SYSTEM32>\COMDLG32.OCX
- <SYSTEM32>\VB6KO.DLL
- <SYSTEM32>\MSINET.OCX
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- '12#.#8.93.181':80
- 'ad.###kprice.com':80
- 'localhost':1036
- 12#.#8.93.181/~adcodecplus/oceanfile/oceanfile.html
- ad.###kprice.com/stlink.php?m=#######################################################
- DNS ASK ad.###kprice.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''