Техническая информация
- '<SYSTEM32>\wscript.exe' "%APPDATA%\MyFolder\tmp0.vbs" 0
- '<SYSTEM32>\userinit.exe'
- <SYSTEM32>\userinit.exe
- %APPDATA%\MyFolder\tmp0.vbs
- %APPDATA%\MyFolder\SeventiesRockMusicIII.ram
- 'bi#####tcher.no-ip.biz':65300
- DNS ASK bi#####tcher.no-ip.biz