Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{DBE1F4D9-0D46-52E1-0850-D7597CE713F6}] 'stubpath' = ''
- %TEMP%\nsrss.exe
- %WINDIR%\explorer.exe
- %WINDIR%\Explorer.EXE
- %PROGRAM_FILES%\Microsoft\scvhost.exe
- %APPDATA%\addon.dat
- %TEMP%\nsrss.exe
- %TEMP%\nsrss.exe
- 'kc#####cz.no-ip.info':81
- DNS ASK kc#####cz.no-ip.info