Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KPeerNexonEU' = 'C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe'
- %WINDIR%\NEXON_EU_DownloaderUpdater.exe http://do#####d.nexoneu.com/cba/fullversion/Combatarms_eu.exe CombatArms
- %TEMP%\SystemFiles2.exe
- %TEMP%\SystemFiles1.exe
- %WINDIR%\NEXON_EU_DownloaderUpdater.exe
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\Preferred
- <SYSTEM32>\nxEuUninstall.bat
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\699c4b9cdebca7aaea5193cae8a50098_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %TEMP%\SystemFiles1.exe
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\faf52435-8ea8-4095-8bf2-07edf612f428
- %TEMP%\SystemFiles2.exe
- %TEMP%\~DF37FD.tmp
- 'do######.mapleeurope.com':80
- do######.mapleeurope.com/KamuseDownloader/Nexon_EU/NEXON_EU_Downloader_Updater.xml
- DNS ASK do######.mapleeurope.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''