Техническая информация
- %TEMP%\nsd3.tmp\ns4.tmp net stop WSCSVC
- <SYSTEM32>\net1.exe stop WSCSVC
- <SYSTEM32>\net.exe stop WSCSVC
- %TEMP%\nsd3.tmp\NSISdl.dll
- %WINDIR%\4a2e18e6ba6251db770378edad0e.exe
- %TEMP%\nsd3.tmp\ns4.tmp
- %TEMP%\nsw2.tmp
- %TEMP%\nsd3.tmp\nsExec.dll
- %TEMP%\nsd3.tmp\ns4.tmp
- 'www.ho####kfiles.com':80
- www.ho####kfiles.com/files/2767616_5uzoy/4a2e18e6ba6251db770378edad0e.exe
- DNS ASK www.ho####kfiles.com