Техническая информация
- <SYSTEM32>\net1.exe stop WSCSVC
- <SYSTEM32>\net.exe stop WSCSVC
- %TEMP%\nsc3.tmp\NSISdl.dll
- %WINDIR%\XLC-2-3-4-Delay.exe
- %WINDIR%\XLC-2c-3c-4c.exe
- %TEMP%\nsx2.tmp
- %TEMP%\nsc3.tmp\nsExec.dll
- %TEMP%\nsc3.tmp\ns4.tmp
- %TEMP%\nsc3.tmp\ns4.tmp
- 'pr###rent.cn':80
- pr###rent.cn/XLC-2c-3c-4c.exe
- pr###rent.cn/XLC-2-3-4-Delay.exe
- DNS ASK pr###rent.cn