Техническая информация
- %TEMP%\nsvdc06.tmp
- %TEMP%\nsvdc07.tmp\frndelete.dll
- %ProgramFiles(x86)%\happycoin\iutil.ini
- %TEMP%\nsvdc07.tmp\dllwebcount.dll
- %TEMP%\nsvdc07.tmp\selfdelete.dll
- C:\delus.bat
- %TEMP%\nsvdc07.tmp\dllwebcount.dll
- %TEMP%\nsvdc07.tmp\frndelete.dll
- %TEMP%\nsvdc07.tmp\selfdelete.dll
- http://ie###w.co.kr/partner/counter/install.php?pi######################
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK ie###w.co.kr
- DNS ASK microsoft.com
- '%WINDIR%\syswow64\cmd.exe' /c \DelUS.bat' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c \DelUS.bat