Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FC23FA59-2754-4FD6-9ADA-20C5758D7F63}] 'Exec' = 'http://click.clickstory.co.kr/?special_vanilla=M43595519.A45354386.001.7064&turl=http%3A%2F%2Fwww.auction.co.kr'
- %PROGRAM_FILES%\clickscps\clickstcps.exe
- %PROGRAM_FILES%\winservicepl\winserviceplinst.exe
- %PROGRAM_FILES%\winservicepl\winservicepldel.exe inst
- %PROGRAM_FILES%\clickscps\Uninstall.exe
- %PROGRAM_FILES%\clickscps\Uninstall.ini
- %PROGRAM_FILES%\clickscps\clickstcps.exe
- %PROGRAM_FILES%\clickscps\clickscpsun.exe
- %WINDIR%\auclcps.ico
- %WINDIR%\alclcps.ico
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\counter_newratio[1].php
- %WINDIR%\gmclcps.ico
- %WINDIR%\bgclcps.ico
- <SYSTEM32>\INETKO.DLL
- <SYSTEM32>\MSINET.OCX
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- <SYSTEM32>\VB6KO.DLL
- %PROGRAM_FILES%\winservicepl\winserviceplinst.exe
- %PROGRAM_FILES%\clickscps\clickscps.dll
- %PROGRAM_FILES%\winservicepl\winservicepl.dll
- %PROGRAM_FILES%\winservicepl\winservicepldel.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- '12#.#43.127.240':80
- 'localhost':1037
- 12#.#43.127.240/count/counter_newratio.php?pi#####################
- ClassName: 'Shell_TrayWnd' WindowName: ''