Technical Information
- '%TEMP%\winshop.exe'
- '%TEMP%\winshop.exe' (downloaded from the Internet)
- %TEMP%\winshop.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\head[1].gif
- 'www.ip###um.or.kr':80
- 'localhost':1038
- www.ip###um.or.kr/rgboard/addon/head.gif
- DNS ASK www.ip###um.or.kr