Техническая информация
- '%TEMP%\nsl2.tmp\OB.exe' /S
- '%TEMP%\nsl2.tmp\OB.exe' (загружен из сети Интернет)
- %TEMP%\nsl2.tmp\i.dat
- %TEMP%\nsl2.tmp\output.txt
- %TEMP%\nsl2.tmp\OB.exe
- %TEMP%\nsl2.tmp\nsRandom.dll
- %TEMP%\nsl2.tmp\IpConfig.dll
- %TEMP%\nsl2.tmp\inetc.dll
- %TEMP%\nsl2.tmp\nsRandom.dll
- %TEMP%\nsl2.tmp\OB.exe
- %TEMP%\nsl2.tmp\output.txt
- %TEMP%\nsl2.tmp\i.dat
- %TEMP%\nsl2.tmp\inetc.dll
- %TEMP%\nsl2.tmp\IpConfig.dll
- 's1##.#dropp.co.cc':80
- '15#.##ropp.co.cc':80
- s1##.#dropp.co.cc/download.php?bu######
- 15#.##ropp.co.cc/trackstats.php
- 15#.##ropp.co.cc/application.php
- DNS ASK s1##.#dropp.co.cc
- DNS ASK 15#.##ropp.co.cc
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'