Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\rndll.exe
- %HOMEPATH%\Start Menu\Programs\Startup\avcheck.exe
- %HOMEPATH%\Start Menu\Programs\Startup\rndll.exe
- %HOMEPATH%\Start Menu\Programs\Startup\avcheck.exe
- %APPDATA%\id.txt
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- 'ro####st.gm9.com':80
- 'wp#d':80
- wp#d/wpad.dat
- DNS ASK ro####st.gm9.com
- DNS ASK wp#d