Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\lol.vbs
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\Start Menu\Programs\Startup\lol.vbs"
- 'cu######tosuspension.com':80
- 'wp#d':80
- cu######tosuspension.com/SkinCodeGenerator.vbs
- wp#d/wpad.dat
- DNS ASK cu######tosuspension.com
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'