Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\xzcphhmpa.vbs
- '<LS_APPDATA>\xzcphhmpa.exe' asdfg
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\Start Menu\Programs\Startup\xzcphhmpa.vbs"
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1806' = '0'
- <LS_APPDATA>\xzcphhmpa.exe