Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\CRNJEUFU2.LNK
- %HOMEPATH%\Start Menu\Programs\Startup\CRNJEUFU1.LNK
- '<SYSTEM32>\wscript.exe' "%TEMP%\b.vbs"
- %APPDATA%\33311336\count.zip
- %TEMP%\b.vbs
- 'lo###ta2.com.br':80
- 'localhost':1036
- lo###ta2.com.br/mega.zip
- DNS ASK lo###ta2.com.br