Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NVIDIA' = '%APPDATA%\nvdisp.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NVIDIA' = '%APPDATA%\nvdisp.exe'
- %APPDATA%\nvdisp.exe
- %APPDATA%\nvdisp.exe
- http://wh###smyip.com/automation/n09230945.asp
- DNS ASK d5.###nloadnow.net
- DNS ASK wh###smyip.com