Техническая информация
- '<SYSTEM32>\mshta.exe' %ALLUSERSPROFILE%//klTemplate.sct
- %ALLUSERSPROFILE%\kltemplate.sct
- %ALLUSERSPROFILE%\qdescending.dll
- 'pa####confirm.com':8088
- DNS ASK pa####confirm.com
- '<SYSTEM32>\rundll32.exe' %ALLUSERSPROFILE%\qDescending.dll,SetRealTimeUsage