Техническая информация
- %TEMP%\nsq2.tmp\ns3.tmp <SYSTEM32>\wscript.exe "%WINDIR%\Temp\nopop.vbs"
- <LS_APPDATA>\nopop.exe
- %WINDIR%\regedit.exe /s c:\nac_EAPOL_value.reg
- <SYSTEM32>\wscript.exe "%WINDIR%\Temp\nopop.vbs"
- %TEMP%\nsq2.tmp\nsExec.dll
- %TEMP%\nsq2.tmp\ns3.tmp
- C:\nac_EAPOL_value.reg
- %WINDIR%\Temp\usdsman_Update.nsi
- <LS_APPDATA>\nopop.exe
- %TEMP%\a19046.bat
- %WINDIR%\Temp\nopop.vbs
- %TEMP%\a19046.bat
- %TEMP%\nsq2.tmp\ns3.tmp
- %TEMP%\nsq2.tmp\nsExec.dll
- %TEMP%\a19046.bat
- C:\nac_EAPOL_value.reg
- ClassName: 'RegEdit_RegEdit' WindowName: ''