Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NRService] 'Start' = '00000002'
- <SYSTEM32>\win6s_c.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\srvany.exe
- <SYSTEM32>\win6s_c.exe
- %WINDIR%\krnln.fnr
- %WINDIR%\winreg_10.dll
- %TEMP%\E_N4\Exmlrpc.fne
- %TEMP%\E_N4\krnln.fnr
- <SYSTEM32>\nrwsers.sys
- %TEMP%\E_N4\zlib.dll
- '48####2.meibu.com':8793
- DNS ASK 48####2.meibu.com