Техническая информация
- %PROGRAM_FILES%\wordver\vedcnt.exe ins
- <SYSTEM32>\cmd.exe /c \DelUS.bat
- %TEMP%\nsg2.tmp\SelfDelete.dll
- C:\DelUS.bat
- %PROGRAM_FILES%\wordver\uninst.exe
- %PROGRAM_FILES%\wordver\vedcnt.exe
- %PROGRAM_FILES%\wordver\wordver.exe
- %TEMP%\nsg2.tmp\SelfDelete.dll
- 'www.to###log.co.kr':80
- www.to###log.co.kr/log/?mo##########################################
- DNS ASK www.to###log.co.kr