Техническая информация
- <SYSTEM32>\tasks\nvngxupdatecheckdaily_{a6b397e0-97e0-97e0-97e0-a6b397e097e0}
- %TEMP%\cc4f.tmp
- %APPDATA%\jcgwsgt
- %APPDATA%\gfhauih
- %TEMP%\3395.tmp.exe
- %PROGRAMDATA%\images.exe
- %APPDATA%\jcgwsgt
- %APPDATA%\gfhauih
- '<DNS_SERVER>':53
- http://www.ms###csi.com/ncsi.txt
- http://ka###cripts.com/images.exe
- http://gt##s.icu/forum/
- DNS ASK ct##r.icu
- DNS ASK gt##s.icu
- DNS ASK ka###cripts.com
- '%TEMP%\3395.tmp.exe'
- '%PROGRAMDATA%\images.exe'