Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\rndll.exe
- %HOMEPATH%\Start Menu\Programs\Startup\avcheck.exe
- '%HOMEPATH%\Start Menu\Programs\Startup\rndll.exe'
- '%HOMEPATH%\Start Menu\Programs\Startup\avcheck.exe'
- %APPDATA%\id.txt
- 'ro####st.gm9.com':80
- 'wp#d':80
- wp#d/wpad.dat
- DNS ASK ro####st.gm9.com
- DNS ASK wp#d