Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nwsapagent] 'Start' = '00000002'
- <SYSTEM32>\sc.exe start Nwsapagent
- <SYSTEM32>\rundll32.exe nwsapagent.dll,RunInstall
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\5UM8IYQI\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\G52BWLEB\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OPQRSTUV\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\LVK91ZCP\desktop.ini
- <SYSTEM32>\nwsapagent.dll
- <SYSTEM32>\GetPro.exe
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\G52BWLEB\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OPQRSTUV\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\LVK91ZCP\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\5UM8IYQI\desktop.ini
- '<IP-адрес в локальной сети>':8070
- DNS ASK www.ms###ole.com
- '<IP-адрес в локальной сети>':1035