Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Miljsttteslaererindesepticidal7' = 'wscript "%HOMEPATH%\Vareprsentationernerefunder3\brydningsloveneshabitatioo.vbs"'
- %WINDIR%\win.ini
- [<HKCU>\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions]
- %APPDATA%\thunderbird\profiles.ini
- %HOMEPATH%\vareprsentationernerefunder3\brydningsloveneshabitatioo.exe
- %HOMEPATH%\vareprsentationernerefunder3\brydningsloveneshabitatioo.vbs
- DNS ASK ch#####.amazonaws.com
- '%HOMEPATH%\vareprsentationernerefunder3\brydningsloveneshabitatioo.exe'