Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'npnAgent' = '<SYSTEM32>\npnAgent.exe /run'
- <SYSTEM32>\npnAgent.exe
- <SYSTEM32>\npnAgent.exe
- %TEMP%\nsy2.tmp\FindProcDLL.dll
- %TEMP%\nsy2.tmp\FindProcDLL.dll
- 'ok###ent.co.kr':80
- ok###ent.co.kr/npnAgent/logip.php
- DNS ASK ok###ent.co.kr
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Daumcleaner' WindowName: ''