Техническая информация
- '%TEMP%\nsz3.tmp\ns7.tmp' ""
- '%TEMP%\nsz3.tmp\ns8.tmp' "\Uninst.exe"
- '%TEMP%\nsz3.tmp\ns6.tmp' "net.exe" stop DD_Service
- '%TEMP%\nsz3.tmp\ns4.tmp' "sc.exe" delete DD_Service
- '%TEMP%\nsz3.tmp\ns5.tmp' "sc.exe" delete DD_CAD
- '<SYSTEM32>\net.exe' stop DD_Service
- '<SYSTEM32>\net1.exe' stop DD_Service
- '<SYSTEM32>\sc.exe' delete DD_Service
- '<SYSTEM32>\sc.exe' delete DD_CAD
- %TEMP%\nsz3.tmp\ns5.tmp
- %TEMP%\nsz3.tmp\ns4.tmp
- %TEMP%\nsz3.tmp\ns6.tmp
- %TEMP%\nsz3.tmp\ns8.tmp
- %TEMP%\nsz3.tmp\ns7.tmp
- %TEMP%\nsz3.tmp\NSISdl.dll
- %TEMP%\nsj2.tmp
- <Текущая директория>\DD0.txt
- %TEMP%\nsz3.tmp\nsExec.dll
- %TEMP%\nsz3.tmp\Splash.dll
- %TEMP%\nsz3.tmp\nsExec.dll
- %TEMP%\nsz3.tmp\ns8.tmp
- %TEMP%\nsz3.tmp\Splash.dll
- %TEMP%\nsz3.tmp\NSISdl.dll
- %TEMP%\nsz3.tmp\ns7.tmp
- %TEMP%\nsz3.tmp\ns4.tmp
- <Текущая директория>\DD0.txt
- %TEMP%\nsz3.tmp\ns6.tmp
- %TEMP%\nsz3.tmp\ns5.tmp
- 'www.du###esk.com':80
- www.du###esk.com/unreg/0.txt
- DNS ASK www.du###esk.com
- ClassName: 'SysListView32' WindowName: '(null)'
- ClassName: '#32770' WindowName: '(null)'
- ClassName: 'DualDesk desktop sink' WindowName: '(null)'