Техническая информация
- '<SYSTEM32>\mshta.exe' %ALLUSERSPROFILE%//klExcel3.sct
- %ALLUSERSPROFILE%\klexcel3.sct
- %ALLUSERSPROFILE%\qline.dll
- 'pa####inament.com':8088
- DNS ASK pa####inament.com
- '<SYSTEM32>\rundll32.exe' %ALLUSERSPROFILE%\qLine.dll,SetRealTimeUsage