Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\<Имя файла>.exe
- <LS_APPDATA>\killvir_8_Conf.ini
- 'vi###total.com':80
- http://www.vi###total.com/vtapi/v2/file/scan via vi###total.com
- DNS ASK www.vi###total.com
- '<SYSTEM32>\cmd.exe' /c schtasks /create /tn killvir_8 /tr "%HOMEPATH%\Start Menu\Programs\Startup\Killvir_8.exe" /sc DAILY /ST 03:23:23
- '<SYSTEM32>\schtasks.exe' /create /tn killvir_8 /tr "%HOMEPATH%\Start Menu\Programs\Startup\Killvir_8.exe" /sc DAILY /ST 03:23:23