Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'vaccf' = '%ProgramFiles%\vaccf\vccFD.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ntsk' = '%WINDIR%\ntsk.exe /time'
- %WINDIR%\ntsk.exe
- 'va####e-free.co.kr':80
- http://up####.#accine-free.co.kr/version/bina/ntsk.exe via va####e-free.co.kr
- http://up####.#accine-free.co.kr/version/controllerVersion via va####e-free.co.kr
- http://va####e-free.co.kr/value.php?st#######################################################################
- http://ap#.###cine-free.co.kr/zoo_setup.php?ma########################## via va####e-free.co.kr
- DNS ASK up####.#accine-free.co.kr
- DNS ASK ap#.###cine-free.co.kr
- DNS ASK va####e-free.co.kr