Техническая информация
- "%TEMP%\nsk2.tmp\OB.exe" (загружен из сети Интернет)
- %TEMP%\nsk2.tmp\i.dat
- %TEMP%\nsk2.tmp\output.txt
- %TEMP%\nsk2.tmp\OB.exe
- %TEMP%\nsk2.tmp\nsRandom.dll
- %TEMP%\nsk2.tmp\IpConfig.dll
- %TEMP%\nsk2.tmp\inetc.dll
- %TEMP%\nsk2.tmp\nsRandom.dll
- %TEMP%\nsk2.tmp\OB.exe
- %TEMP%\nsk2.tmp\output.txt
- %TEMP%\nsk2.tmp\i.dat
- %TEMP%\nsk2.tmp\inetc.dll
- %TEMP%\nsk2.tmp\IpConfig.dll
- 's2###.wdropp.co.cc':80
- '22##.#dropp.co.cc':80
- s2###.wdropp.co.cc/download.php?bu######
- 22##.#dropp.co.cc/trackstats.php
- 22##.#dropp.co.cc/application.php
- DNS ASK s2###.wdropp.co.cc
- DNS ASK 22##.#dropp.co.cc
- ClassName: 'Shell_TrayWnd' WindowName: ''