Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NWCWorkstation] 'Start' = '00000002'
- %TEMP%\133812_XXOO.TEMP
- %TEMP%\133078_XXOO.TEMP
- <SYSTEM32>\NWCWorkstation360.dll
- %TEMP%\133078_OOXX.temp
- %TEMP%\133078_OOXX.temp
- %TEMP%\133812_XXOO.TEMP в <SYSTEM32>\NWCWorkstation360.dll
- %TEMP%\133078_XXOO.TEMP в %TEMP%\133078_OOXX.temp
- 'cp###2.gicp.net':80
- DNS ASK cp###2.gicp.net