Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\SharedFolder.lnk
- %HOMEPATH%\Start Menu\Programs\Startup\SharedFolder.lnk
- <SYSTEM32>\xcopy.exe "%HOMEPATH%\Start Menu\Programs\Startup\SharedFolder.lnk" "%ALLUSERSPROFILE%\Start Menu\Programs\Startup" /Y
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\500[1].htm
- 'co###pub.com':80
- DNS ASK co###pub.com