Техническая информация
- '%TEMP%\nscA6AB.tmp\clearn.exe' /s=123456 /pid=12EC5217-BD4A-4273-AEAB-9DD0D35782A7 /fid=
- chrome.exe
- iexplore.exe
- firefox.exe
- %TEMP%\nscA6AB.tmp\inetc.dll
- %TEMP%\nscA6AB.tmp\clearn.exe
- %TEMP%\nscA6AB.tmp\nsProcess.dll
- %TEMP%\nscA6AB.tmp\System.dll
- %TEMP%\nscA6AB.tmp\nsProcess.dll
- %TEMP%\nscA6AB.tmp\System.dll
- %TEMP%\nscA6AB.tmp\clearn.exe
- %TEMP%\nscA6AB.tmp\inetc.dll
- DNS ASK dn#.##ftncsi.com
- DNS ASK we#####ectionfree.com
- DNS ASK st##.###protectionfree.com
- ClassName: 'Shell_TrayWnd' WindowName: ''