Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NRS_Service] 'Start' = '00000002'
- '<SYSTEM32>\explorer.exe'
- <SYSTEM32>\nrwsers.sys
- <SYSTEM32>\explorer.exe
- <SYSTEM32>\srvany.exe
- %TEMP%\E_N4\krnln.fnr
- %TEMP%\E_N4\Exmlrpc.fne
- %TEMP%\E_N4\zlib.dll
- <SYSTEM32>\explorer.exe
- 'te###.8800.org':8793
- DNS ASK te###.8800.org