Техническая информация
- '%TEMP%\nsc2.tmp\ns3.tmp' taskkill /f /im AppsUpdater.exe
- '<SYSTEM32>\taskkill.exe' /f /im AppsUpdater.exe
- %TEMP%\nsc2.tmp\tkDecript.dll
- %TEMP%\nsc2.tmp\utils.dll
- %TEMP%\nsc2.tmp\ns3.tmp
- %TEMP%\nsc2.tmp\System.dll
- %TEMP%\nsc2.tmp\SimpleSC.dll
- %TEMP%\nsc2.tmp\nsExec.dll
- %TEMP%\nsc2.tmp\ns3.tmp
- 'st###.okitspace.com':443
- DNS ASK st###.okitspace.com
- ClassName: '' WindowName: ''