Техническая информация
- '<SYSTEM32>\cmd.exe' /c \DelUS.bat
- %TEMP%\nsk2.tmp\SelfDelete.dll
- C:\DelUS.bat
- %APPDATA%\ClientRuntimeHost\ClientRuntimeHost.exe
- %TEMP%\nsk2.tmp\DLLWaitForKillProgram.dll
- %TEMP%\nsk2.tmp\NSISdl.dll
- %TEMP%\nsk2.tmp\NSISdl.dll
- %TEMP%\nsk2.tmp\SelfDelete.dll
- %APPDATA%\ClientRuntimeHost\ClientRuntimeHost.exe
- %TEMP%\nsk2.tmp\DLLWaitForKillProgram.dll
- 'nz####ft.cafe24.com':80
- http://nz####ft.cafe24.com/app/ClientRuntimeHost.exe
- DNS ASK nz####ft.cafe24.com