Техническая информация
- %TEMP%\nsk2.tmp
- %TEMP%\nsa3.tmp\System.dll
- %APPDATA%\1337\Stream Sraft.exe
- %APPDATA%\1337\StreamCraft .exe
- %WINDIR%\12.exe
- %WINDIR%\13.bat
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\launch[1].php
- %TEMP%\Starter.exe
- %TEMP%\nsa3.tmp\System.dll
- 'la######.streamcraft.net':80
- http://la######.streamcraft.net/launch.php?st##########
- DNS ASK la######.streamcraft.net
- ClassName: 'EDIT' WindowName: ''
- '%APPDATA%\1337\Stream Sraft.exe'
- '%APPDATA%\1337\StreamCraft .exe'
- '%TEMP%\Starter.exe'
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\13.bat" "