Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'EasysearchEngine' = '%PROGRAM_FILES%\EasysearchEngine\EasysearchEngineUpdate.exe'
- %PROGRAM_FILES%\EasysearchEngine\EasysearchEngine.exe
- %PROGRAM_FILES%\EasysearchEngine\EasysearchEngineUpdate.exe
- %PROGRAM_FILES%\EasysearchEngine\Unstall.exe
- %PROGRAM_FILES%\EasysearchEngine\EasysearchEngine.exe
- 'ea#######hengine.365down.co.kr':80
- 'www.ea####archengine.me':80
- 'localhost':1036
- 'localhost':1037
- ea#######hengine.365down.co.kr/easysearch/live.php
- www.ea####archengine.me/easysearch/checkon.php
- DNS ASK www.ea####archengine.me
- DNS ASK ea#######hengine.365down.co.kr
- ClassName: 'Indicator' WindowName: ''