Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'skpatchInit' = '"%PROGRAM_FILES%\skpatch\skpatch.exe" startup'
- '%PROGRAM_FILES%\skpatch\skpatch.exe' startup
- %TEMP%\3.tmp
- %TEMP%\4.tmp
- %TEMP%\5.tmp
- %PROGRAM_FILES%\skpatch\skpatch.exe
- %PROGRAM_FILES%\skpatch\uninstall.exe
- %TEMP%\2.tmp
- %TEMP%\4.tmp
- %TEMP%\5.tmp
- %TEMP%\2.tmp
- %TEMP%\3.tmp
- 'se###hkey.kr':80
- se###hkey.kr/ptn/bt.php?p=###################
- se###hkey.kr/en/appdata_searchkey.ini
- se###hkey.kr/freeshop/data.ini
- se###hkey.kr/ptn/inst.php?p=###################
- DNS ASK se###hkey.kr