Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kWvmm' = 'C:\baejawk\kWvmmr\Run.vbs'
- [<HKCU>\Software\RimArts\B2\Settings]
- [<HKCU>\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions]
- [<HKCU>\Software\FTPWare\COREFTP\Sites]
- %APPDATA%\thunderbird\profiles.ini
- C:\baejawk\kwvmmr\run.vbs
- C:\baejawk\kwvmmr\kwvmm.exe