Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '{5e9e40de-0875-aefe-dd8b-370160897503}' = '<SYSTEM32>\Rundll32.exe "<SYSTEM32>\{59ce7ce5-813d-13fe-2797-e6ed87804b0c}.dll" DllInit'
- '<SYSTEM32>\rundll32.exe' "<SYSTEM32>\{59ce7ce5-813d-13fe-2797-e6ed87804b0c}.dll" DllInit
- <SYSTEM32>\{59ce7ce5-813d-13fe-2797-e6ed87804b0c}.dll-uninst.exe
- %TEMP%\nsw3.tmp\NSISdl.dll
- %TEMP%\activation_key
- %TEMP%\nsr2.tmp
- %TEMP%\nsw3.tmp\System.dll
- <SYSTEM32>\{59ce7ce5-813d-13fe-2797-e6ed87804b0c}.dll
- %TEMP%\nsw3.tmp\System.dll
- %TEMP%\nsw3.tmp\NSISdl.dll
- %TEMP%\activation_key
- 'cp##ky.biz':80
- cp##ky.biz/bc/nsi_install.php?af#############################################################################
- DNS ASK cp##ky.biz
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''