Техническая информация
- '%TEMP%\nsh3.tmp\setup_3386.exe'
- '%TEMP%\nsh3.tmp\setup_3386.exe' (загружен из сети Интернет)
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\nsh3.tmp\4.ico
- %TEMP%\nsh3.tmp\NSISdl.dll
- %TEMP%\nsh3.tmp\OfficeAssist.0195.80.1056.exe
- %TEMP%\nsh3.tmp\setup_3386.exe
- %TEMP%\nsh3.tmp\System.dll
- %TEMP%\nsc2.tmp
- %TEMP%\nsh3.tmp\NsProcess.dll
- %TEMP%\nsh3.tmp\2.ico
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- 'www.mi###eian.me':80
- www.mi###eian.me/OfficeAssist.0195.80.1056.rar
- www.mi###eian.me/setup_3386.rar
- www.mi###eian.me/2.ico
- DNS ASK www.mi###eian.me