Техническая информация
- %TEMP%\nsb3.tmp\ns4.tmp net stop WSCSVC
- <SYSTEM32>\net1.exe stop WSCSVC
- <SYSTEM32>\net.exe stop WSCSVC
- %TEMP%\nsb3.tmp\NSISdl.dll
- %WINDIR%\2.exe
- %WINDIR%\3.exe
- %TEMP%\nsg2.tmp
- %TEMP%\nsb3.tmp\nsExec.dll
- %TEMP%\nsb3.tmp\ns4.tmp
- %TEMP%\nsb3.tmp\ns4.tmp
- 'pr###rent.cn':80
- pr###rent.cn/3.exe
- pr###rent.cn/2.exe
- DNS ASK pr###rent.cn