Техническая информация
- <SYSTEM32>\tcpsrvcs.exe (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\ser51[1].exe
- <SYSTEM32>\tcpsrvcs.exe
- %WINDIR%\do.dll
- %WINDIR%\user.dll
- %WINDIR%\user32.dll
- %WINDIR%\do.dll
- 'www.sa###uk.or.kr':80
- 'localhost':1034
- www.sa###uk.or.kr/images/club/ser51.exe
- DNS ASK www.sa###uk.or.kr