Техническая информация
- %PROGRAM_FILES%\ingrid\ingrid.exe (загружен из сети Интернет)
- %PROGRAM_FILES%\ingrid\ingrid_delete.exe
- %PROGRAM_FILES%\ingrid\ingrid.exe
- 'lo###.1140.co.kr':80
- 'go###e.co.kr':80
- lo###.1140.co.kr/program/ingrid.exe
- lo###.1140.co.kr/program/ingrid_delete.exe
- go###e.co.kr/
- lo###.1140.co.kr/program/version.php
- DNS ASK lo###.1140.co.kr
- DNS ASK go###e.co.kr
- ClassName: 'MS_WINHELP' WindowName: ''