Техническая информация
- %TEMP%\nsk5.tmp
- %TEMP%\nso3.tmp\NSISdl.dll
- %TEMP%\RoadVarying\20121203222304.dat
- %TEMP%\RoadVarying\flag.ini
- %TEMP%\RoadVarying\flag.txt
- %TEMP%\nsy2.tmp
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %TEMP%\RoadVarying\20121203222304.ini
- %TEMP%\nso3.tmp\System.dll
- 'cd########94db8a.adollangel.pe.kr':80
- cd########94db8a.adollangel.pe.kr/get2.php?e=#########################################################
- DNS ASK cd########94db8a.adollangel.pe.kr