Техническая информация
- '<SYSTEM32>\mshta.exe' %ALLUSERSPROFILE%//klDialogActivate.sct
- %ALLUSERSPROFILE%\kldialogactivate.sct
- %ALLUSERSPROFILE%\qpaperenvelopeb5.dll
- 'pa####confirm.com':8088
- DNS ASK pa####confirm.com
- '<SYSTEM32>\rundll32.exe' %ALLUSERSPROFILE%\qPaperEnvelopeB5.dll,SetRealTimeUsage