Техническая информация
- '<SYSTEM32>\taskhost.exe'
- '<SYSTEM32>\conhost.exe'
- <SYSTEM32>\conhost.exe
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w94gD8hIi9.lnk
- %APPDATA%\Roaming\xJklNNL\5785.xml
- %APPDATA%\Roaming\xJklNNL\5785.xml в %APPDATA%\Roaming\xJklNNL\w94gD8hIi9.exe