Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\SessLicense.lnk
- <SYSTEM32>\rundll32.exe %ALLUSERSPROFILE%\Application Data\xml.db,NnvTlsp
- <SYSTEM32>\cmd.exe /c %TEMP%\bywu.cmd
- %TEMP%\bywu.cmd
- %ALLUSERSPROFILE%\Application Data\xml.db
- %ALLUSERSPROFILE%\Application Data\xml.db
- %TEMP%\bywu.cmd