Техническая информация
- '%TEMP%\~nsu.tmp\Au_.exe' _?=<Текущая директория>\
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\nsj3.tmp\versionex.dll
- %TEMP%\nsj3.tmp\modern-wizard.bmp
- %TEMP%\~nsu.tmp\Au_.exe
- %TEMP%\nsj3.tmp\System.dll
- %TEMP%\nsj3.tmp\Helper.dll
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite-shm
- 'l.####vwizard.com':80
- l.####vwizard.com/la?v=#
- l.####vwizard.com/lp?v=#
- l.####vwizard.com/ii?v=#
- DNS ASK l.####vwizard.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '#32770' WindowName: ''