Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NWCWorkstation] 'Start' = '00000002'
- %TEMP%\118359_XXOO.TEMP
- %TEMP%\115000_XXOO.TEMP
- <SYSTEM32>\NWCWorkstation360.dll
- %TEMP%\115000_OOXX.temp
- %TEMP%\115000_OOXX.temp
- 'cp###2.gicp.net':80
- DNS ASK cp###2.gicp.net