Техническая информация
- %WINDIR%\Tasks\Acrobat Update.job
- %TEMP%\nsh3.tmp\options.ini
- %TEMP%\nsh3.tmp\System.dll
- %TEMP%\nsc2.tmp
- %TEMP%\svchost.exe
- %TEMP%\PowerISO47.exe
- %WINDIR%\Tasks\Acrobat Update.job
- 'www.gu##man.cn':80
- www.gu##man.cn/x/re.php?ve###################
- DNS ASK www.gu##man.cn
- ClassName: 'SCDEMUAPP_C2C80BFA WNDCLASS' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''