Техническая информация
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'DoctorSpyware' = '%ProgramFiles(x86)%\doctorspyware\doctorspyware_starter.exe'
- %ProgramFiles(x86)%\doctorspyware\doctorspyware.exe
- %ProgramFiles(x86)%\doctorspyware\doctorspyware_starter.exe
- %ProgramFiles(x86)%\doctorspyware\ver.ini
- %ProgramFiles(x86)%\doctorspyware\license.txt
- %ProgramFiles(x86)%\doctorspyware\doctorspyware_db.sa_
- %ProgramFiles(x86)%\doctorspyware\doctorspyware_pdb.sa_
- %ProgramFiles(x86)%\doctorspyware\doctorspyware.dll
- %ProgramFiles(x86)%\doctorspyware\drspyshortcut.exe
- %WINDIR%\doctorspyware_uninstaller.exe
- DNS ASK ch###.##ctorspyware.co.kr
- '%ProgramFiles(x86)%\doctorspyware\doctorspyware_starter.exe'