Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\kiss.exe
- '%APPDATA%\smss.exe'
- '<SYSTEM32>\wscript.exe' "C:\1.vbs"
- C:\1.vbs
- %APPDATA%\smss.exe
- %HOMEPATH%\Start Menu\Programs\Startup\kiss.exe
- %APPDATA%\smss.exe
- C:\1.vbs
- 'cw##.3322.org':8717
- DNS ASK cw##.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'