Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NWCWorkstation] 'Start' = '00000002'
- '<SYSTEM32>\taskkill.exe' /f /t /im RSTray.exe&taskkill /f /t /im 360Tray.exe&taskkill /f /t /im 360safe.exe
- %TEMP%\2013 627184753_cEnY.TEMP
- <SYSTEM32>\NWCWorkstationSystem64.dll
- %TEMP%\2013 627184753_cEnY.TEMP в <SYSTEM32>\NWCWorkstationSystem64.dll
- 'mi####idi.3322.org':3468
- DNS ASK mi####idi.3322.org