Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\V3Safer] 'Start' = '00000002'
- '<SYSTEM32>\rundll32.exe' "<SYSTEM32>\V3Safer32.dll",IEFire
- '<SYSTEM32>\svchost.exe' -k V3Safer
- <SYSTEM32>\V3Safer32.dll
- '20#.#3.144.66':80
- 'www.hx##.co.kr':80
- 20#.#3.144.66/winupdate2/index.txt
- www.hx##.co.kr/winupdate2/index.txt
- DNS ASK www.hx##.co.kr
- ClassName: 'IEFrame' WindowName: ''