Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\smpsvc32] 'Start' = '00000002'
- '%PROGRAM_FILES%\smartmanager\smpsvc.exe'
- '%PROGRAM_FILES%\smartmanager\smartmanager.exe' "i=self"
- %PROGRAM_FILES%\smartmanager\smartmanager.exe
- %PROGRAM_FILES%\smartmanager\smpsvp.exe
- %PROGRAM_FILES%\smartmanager\smpsvt.exe
- %PROGRAM_FILES%\smartmanager\uninstall_smartmanager.exe
- %PROGRAM_FILES%\smartmanager\smpsvtu.exe
- %PROGRAM_FILES%\smartmanager\smpsvu.exe
- %TEMP%\nsh2.tmp\WinOS.dll
- %TEMP%\nsh2.tmp\System.dll
- %TEMP%\nsh2.tmp\SimpleSC.dll
- %PROGRAM_FILES%\smartmanager\smpsvc.exe
- %TEMP%\nsh2.tmp\Processes.dll
- %TEMP%\nsh2.tmp\System.dll
- %TEMP%\nsh2.tmp\WinOS.dll
- %TEMP%\nsh2.tmp\Processes.dll
- %TEMP%\nsh2.tmp\SimpleSC.dll
- 'www.sm####manager.co.kr':80
- www.sm####manager.co.kr/pi.php
- DNS ASK www.sm####manager.co.kr