Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CleanSpy' = '%ProgramFiles%\CleanSpy\cleanspyup.exe'
- %ProgramFiles%\CleanSpy\SpywareInfo\MZ
- %ProgramFiles%\CleanSpy\SpywareInfo\DB_Install.txt
- %HOMEPATH%\Start Menu\CleanSpy.lnk
- %HOMEPATH%\Desktop\CleanSpy.lnk
- %ProgramFiles%\CleanSpy\MZ
- %ProgramFiles%\CleanSpy\version.txt
- <SYSTEM32>\MZ
- <SYSTEM32>\version_un.txt
- <SYSTEM32>\version_un.txt
- %ProgramFiles%\CleanSpy\version.txt
- %ProgramFiles%\CleanSpy\SpywareInfo\DB_Install.txt
- 'up#.##eanspy.co.kr':80
- http://up#.##eanspy.co.kr/Install/DB/DB_Install.txt
- http://up#.##eanspy.co.kr/Install/DB/MZ
- http://up#.##eanspy.co.kr/Install/DB/
- http://up#.##eanspy.co.kr/Install/cleanspy/version_un.txt
- http://up#.##eanspy.co.kr/Install/cleanspy/version.txt
- http://up#.##eanspy.co.kr/Install/cleanspy/MZ
- http://up#.##eanspy.co.kr/Install/cleanspy/
- DNS ASK up#.##eanspy.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: ''