Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KCPointC' = '%ProgramFiles%\KCPoint\ControlKCPoint.exe'
- '%ProgramFiles%\cshopline.exe' (загружен из сети Интернет)
- '<SYSTEM32>\mfc32.dll' (загружен из сети Интернет)
- '%ProgramFiles%\cshopline.exe'
- '<SYSTEM32>\mfc32.dll'
- %ProgramFiles%\cshopline.exe
- <SYSTEM32>\mfc32.dll
- 'www.sh###ine.or.kr':80
- 'www.kc##int.com':80
- 'kc###dit.co.kr':80
- http://www.kc##int.com/Info/Application/KCPointD.exe
- http://www.sh###ine.or.kr/pds/cshopline.exe
- http://kc###dit.co.kr/Program/ProgramList.asp?Pr#######################################################
- http://www.kc##int.com/Info/Application/k.exe
- DNS ASK www.sh###ine.or.kr
- DNS ASK www.kc##int.com
- DNS ASK kc###dit.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'WorkerW' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''