Техническая информация
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nsp8994.tmp\system.dll
- %TEMP%\nsp8994.tmp\killprocdll.dll
- %TEMP%\nsp8994.tmp\killer.dll
- %TEMP%\nsp8994.tmp\killer.dll
- %TEMP%\nsp8994.tmp\killprocdll.dll
- %TEMP%\nsp8994.tmp\system.dll
- ClassName: '#32770' WindowName: ''
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Текущая директория>\
- '<SYSTEM32>\regsvr32.exe' /s /u "<SYSTEM32>\ccnewMicrodone\ccnewPassGuardX.dll"
- '<SYSTEM32>\regsvr32.exe' /s /u "<SYSTEM32>\ccnewMicrodone\MDCollector.dll"
- '<SYSTEM32>\regsvr32.exe' /s /u "<SYSTEM32>\ccnewMicrodone\npPassGuardXccnew_x64.dll"