Техническая информация
- '%ALLUSERSPROFILE%\Application Data\gwr\wsav.exe'
- '%ALLUSERSPROFILE%\Application Data\gwr\wsav.exe' (загружен из сети Интернет)
- %TEMP%\nsy2.tmp\NSISdl.dll
- %ALLUSERSPROFILE%\Application Data\gwr\wsav.exe
- %TEMP%\nsy2.tmp\UAC.dll
- %TEMP%\nsy2.tmp\exdll.dll
- 'zp##.##een-av-pro.com':80
- zp##.##een-av-pro.com/P465DA40F0A22AD1018791=/wsav.ttt
- DNS ASK zp##.##een-av-pro.com