Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wlo' = '<SYSTEM32>:wlo.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{8EE13BCB-2B9B-B4DA-F99B-091DB8278B2A}] 'StubPath' = '<SYSTEM32>:wlo.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:wlo.exe
- 'ln####ort.no-ip.org':3460
- DNS ASK ln####ort.no-ip.org