Техническая информация
- '%TEMP%\nsd2.tmp\reg.exe' addreg
- '%TEMP%\nsd2.tmp\Clear.exe'
- '<SYSTEM32>\regsvr32.exe' /u /s <SYSTEM32>\DBtextbsa32.dll
- '<SYSTEM32>\regsvr32.exe' /u /s <SYSTEM32>\IEH.dll
- iexplore.exe
- %HOMEPATH%\Favorites\НжУОП·ПВФШ.url
- %HOMEPATH%\Favorites\МФ±¦№єОп.url
- %TEMP%\nsd2.tmp\InstallOptions.dll
- %HOMEPATH%\Favorites\єГМШИнјюХѕ.url
- %HOMEPATH%\Favorites\go2000НшЦ·µјєЅ.url
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\soft[1].htm
- %TEMP%\ver.ini
- %HOMEPATH%\Favorites\7k7kРЎУОП·.url
- %HOMEPATH%\Favorites\КµУГІйСЇ.url
- %TEMP%\nsd2.tmp\modern-header.bmp
- %APPDATA%\Microsoft\haote.ico
- %TEMP%\nsd2.tmp\KillProcDLL.dll
- %TEMP%\nsd2.tmp\nsRandom.dll
- %TEMP%\nsd2.tmp\Clear.exe
- %TEMP%\nsd2.tmp\ioSpecial.ini
- %TEMP%\nsd2.tmp\System.dll
- %TEMP%\nsd2.tmp\BrandingURL.dll
- %TEMP%\nsd2.tmp\modern-wizard.bmp
- %TEMP%\nsd2.tmp\reg.exe
- 'ne#.#ewyx.net':80
- 'localhost':1038
- ne#.#ewyx.net/soft.htm
- DNS ASK ne#.#ewyx.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'