Техническая информация
- '<SYSTEM32>\cscript.exe' "%TEMP%\4.tmp.vbs"
- '<SYSTEM32>\cscript.exe' "%TEMP%\3.tmp.vbs"
- [<HKCU>\Software\Microsoft\Internet Account Manager]
- [<HKCU>\Software\Microsoft\Internet Account Manager\Accounts]
- [<HKCU>\Software\Microsoft\Internet Explorer\IntelliForms\Storage2]
- %TEMP%\4.tmp.vbs
- %TEMP%\3.tmp.vbs
- %TEMP%\4.tmp.vbs
- %TEMP%\3.tmp.vbs
- 'po####.interia.pl':465
- DNS ASK po####.interia.pl