Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\wlerlc8zbn.lnk
- '<SYSTEM32>\rundll32.exe' %TEMP%\nbz8clrelw.dss,XL204
- '<SYSTEM32>\rundll32.exe' %ALLUSERSPROFILE%\Application Data\nbz8clrelw.dss,XL200
- %ALLUSERSPROFILE%\Application Data\wlerlc8zbn.bxx
- %TEMP%\nbz8clrelw.dss
- %ALLUSERSPROFILE%\Application Data\nbz8clrelw.dss
- <SYSTEM32>\PerfStringBackup.TMP
- '46.##5.220.180':443
- '19#.#15.114.209':443
