Техническая информация
- %TEMP%\nsmd93f.tmp
- %TEMP%\nscd950.tmp\settings.reg
- %TEMP%\nscd950.tmp\system.dll
- %TEMP%\nscd950.tmp\nsexec.dll
- %ALLUSERSPROFILE%\corel\bin\540227504\540111179\x-force.bin
- %TEMP%\nscd950.tmp\nsexec.dll
- %TEMP%\nscd950.tmp\settings.reg
- %TEMP%\nscd950.tmp\system.dll
- ClassName: '#32770' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '%WINDIR%\syswow64\ipconfig.exe' /flushdns' (со скрытым окном)
- '%WINDIR%\syswow64\regedit.exe' /s "%TEMP%\nscD950.tmp\Settings.reg"' (со скрытым окном)
- '%WINDIR%\syswow64\ipconfig.exe' /flushdns
- '%WINDIR%\syswow64\regedit.exe' /s "%TEMP%\nscD950.tmp\Settings.reg"