Техническая информация
- %TEMP%\nsxc12.tmp\system.dll
- %TEMP%\cddcae7b-fca4-914f-a081-eb5a03bc159c\instsupp.dll
- %TEMP%\cddcae7b-fca4-914f-a081-eb5a03bc159c\nsc6af4.tmp
- %TEMP%\nsxc12.tmp\md5dll.dll
- %TEMP%\nsxc12.tmp\modern-header.bmp
- %TEMP%\nsxc12.tmp\modern-wizard.bmp
- %TEMP%\nsxc12.tmp\nsdialogs.dll
- 'hu###omains.com':443
- 'microsoft.com':80
- 'go#####analytics.com':80
- http://www.go#####analytics.com/collect
- 'hu###omains.com':443
- DNS ASK su##.##njaloader.com
- DNS ASK hu###omains.com
- DNS ASK microsoft.com
- DNS ASK go#####analytics.com
- DNS ASK cd#.##njaloader.com
- '%WINDIR%\syswow64\rundll32.exe' "%TEMP%\CDDCAE7B-FCA4-914F-A081-EB5A03BC159C\InstSupp.dll",CmdProc --Level --Supp 541 --Ver 122
- '%WINDIR%\syswow64\rundll32.exe' "%TEMP%\CDDCAE7B-FCA4-914F-A081-EB5A03BC159C\InstSupp.dll",CmdProc --Goo --Proc checkinstall --Supp 541 --Cid 00EB84C6-8184-7B49-B73C-3F3F1D973674
- '%WINDIR%\syswow64\rundll32.exe' "%TEMP%\CDDCAE7B-FCA4-914F-A081-EB5A03BC159C\InstSupp.dll",CmdProc --Check --Supp 541 --Uid D5C4DCD3B9283B42ABF5A478719D006E
- '%WINDIR%\syswow64\rundll32.exe' "%TEMP%\CDDCAE7B-FCA4-914F-A081-EB5A03BC159C\InstSupp.dll",CmdProc --Goo --Proc startinstall --Supp 541 --Cid 889F5EFE-F482-714C-9898-B9F3BB95A940