Техническая информация
- '<SYSTEM32>\PresentationSet3.exe' SW_HIDE
- '<SYSTEM32>\PresentationSet3.exe' (загружен из сети Интернет)
- %TEMP%\nsw2.tmp\DLLWebCount.dll
- <SYSTEM32>\PresentationSet3.exe
- %TEMP%\nsw2.tmp\NSISdl.dll
- 'co#####.tkagkreh.com':80
- 'www.qn###stks.com':80
- co#####.tkagkreh.com/partner/004/analytics/request/count.php?mo##################
- www.qn###stks.com/cupdate.exe
- DNS ASK co#####.tkagkreh.com
- DNS ASK www.qn###stks.com