Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\System.lnk
- %HOMEPATH%\trenveu4\file.exe
- %HOMEPATH%\trenveu4\krufkx.vbs
- C:\zktiqo3\windows10.up.exe
- ClassName: 'EDIT' WindowName: ''
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\trenveu4\krufkx.vbs"
- '%HOMEPATH%\trenveu4\file.exe' -plepro6pdk9rqik1
- 'C:\zktiqo3\windows10.up.exe'