Техническая информация
- %TEMP%\ExtraTypeSetup.exe
- %TEMP%\nst4.tmp\System.dll
- <SYSTEM32>\ExtraType.exe
- %TEMP%\nst4.tmp\DLLWebCount.dll
- %TEMP%\nst4.tmp\Math.dll
- %TEMP%\nate9.exe
- %TEMP%\ExtraTypeSetup.exe
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %TEMP%\nsh3.tmp
- 'to###.gomworld.com':80
- to###.gomworld.com/log_install.php?mM#####################################
- DNS ASK to###.gomworld.com