Technical Information
- '<SYSTEM32>\cmd.exe' /c \DelUS.bat
- %TEMP%\nsr2.tmp\SelfDelete.dll
- C:\DelUS.bat
- %TEMP%\liveonair_install.exe
- %TEMP%\nsr2.tmp\SetSecondary.dll
- %TEMP%\nsr2.tmp\NSISdl.dll
- %TEMP%\nsr2.tmp\SelfDelete.dll
- %TEMP%\nsr2.tmp\SetSecondary.dll
- %TEMP%\liveonair_install.exe
- %TEMP%\nsr2.tmp\NSISdl.dll
- 'on###.#ivetools.co.kr':80
- on###.#ivetools.co.kr/download/loa_agent.exe
- DNS ASK on###.#ivetools.co.kr