Техническая информация
- %TEMP%\nsp4a1a.tmp
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nsv4e7e.tmp
- %TEMP%\nsk4e8e.tmp\stdutils.dll
- %TEMP%\nsk4e8e.tmp\system.dll
- %TEMP%\nsk4e8e.tmp\installerutils.dll
- %TEMP%\nsk4e8e.tmp\installerutils2.dll
- %TEMP%\nsk4e8e.tmp\nsisos.dll
- %TEMP%\nsk4e8e.tmp\md5dll.dll
- %TEMP%\nsk4e8e.tmp\userinfo.dll
- %TEMP%\nsk4e8e.tmp\installerutils.dll
- %TEMP%\nsk4e8e.tmp\installerutils2.dll
- %TEMP%\nsk4e8e.tmp\md5dll.dll
- %TEMP%\nsk4e8e.tmp\nsisos.dll
- %TEMP%\nsk4e8e.tmp\stdutils.dll
- %TEMP%\nsk4e8e.tmp\system.dll
- %TEMP%\nsk4e8e.tmp\userinfo.dll
- 'ip###api.com':80
- 'su####-smiles.com':80
- http://ip###api.com/
- http://su####-smiles.com/
- DNS ASK ip###api.com
- DNS ASK su####-smiles.com
- DNS ASK st###.##wstatsdatanet.com
- ClassName: 'CabinetWClass' WindowName: ''
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Текущая директория>\