Техническая информация
- '%TEMP%\DROP.EXE'
- '%TEMP%\nsn3.tmp\ns4.tmp' "CMD.EXE" /c %TEMP%\DROP.EXE"
- '%TEMP%\DROP.EXE' (загружен из сети Интернет)
- %TEMP%\nsn3.tmp\nsExec.dll
- %TEMP%\nsn3.tmp\ns4.tmp
- %TEMP%\DROP.CAB
- %TEMP%\nsd2.tmp
- %TEMP%\nsn3.tmp\nsisdl.dll
- %TEMP%\nsn3.tmp\nsisdl.dll
- %TEMP%\nsn3.tmp\nsExec.dll
- %TEMP%\nsn3.tmp\ns4.tmp
- %TEMP%\DROP.CAB в %TEMP%\DROP.EXE
- 'en##pay.com':80
- en##pay.com/files/build.cab
- DNS ASK en##pay.com