Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\adprovider.url
- %WINDIR%\syswow64\dllhost.exe
- %HOMEPATH%\logonui\logonui.exe
- %HOMEPATH%\logonui\adprovider.vbs
- %HOMEPATH%\logonui\logonui.exe
- %HOMEPATH%\logonui\adprovider.vbs
- 'ru######ersburg.ra4wvpn.com':8055
- DNS ASK ru######ersburg.ra4wvpn.com
- '%WINDIR%\syswow64\dllhost.exe'