Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\3pd3m8ye.url
- %HOMEPATH%\infusedapps\ou3x1ga6.vbs
- %HOMEPATH%\infusedapps\grpconv.exe
- %TEMP%\uninstall.vbs
- %TEMP%\uninstall.vbs
- DNS ASK sd###########234uijxdzsfsrfwdfsdf.linkpc.net
- '%WINDIR%\syswow64\wscript.exe' "%TEMP%\uninstall.vbs"
- '%WINDIR%\syswow64\wscript.exe' "%TEMP%\uninstall.vbs"' (со скрытым окном)