Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SmartKeyword' = '%PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SkeyAgent.exe'
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SkeyAgent.exe
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SKeyInstaller.exe
- <SYSTEM32>\taskkill.exe -f -im SkeyAgent.exe
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\unins000.exe
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\unins000.dat
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SmartKeyword.dll
- %TEMP%\sk1.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\version[1].txt
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SkeyAgent.exe
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SkeyAgentHelper.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SkeyUpdate.exe
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SkeyUninstaller.exe
- %PROGRAM_FILES%\mediaweb\Iehelp\smartkeyword\SKeyInstaller.exe
- %TEMP%\sk1.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- 'up####.#martkeyword.co.kr':80
- 'localhost':1037
- 'xm#.###rtkeyword.co.kr':80
- up####.#martkeyword.co.kr/file/version.txt
- xm#.###rtkeyword.co.kr/smart_install_chk.php?af#############
- xm#.###rtkeyword.co.kr/ip_install_chk.php
- DNS ASK up####.#martkeyword.co.kr
- DNS ASK xm#.###rtkeyword.co.kr
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''