Техническая информация
- '<SYSTEM32>\mshta.exe' %ALLUSERSPROFILE%//klAutoClose.sct
- %ALLUSERSPROFILE%\klautoclose.sct
- %ALLUSERSPROFILE%\qwj3fj3.dll
- 'pa####confirm.com':8088
- DNS ASK pa####confirm.com
- '<SYSTEM32>\rundll32.exe' %ALLUSERSPROFILE%\qWJ3FJ3.dll,SetRealTimeUsage