Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\bejwljg.lnk
- '<SYSTEM32>\rundll32.exe' %TEMP%\gjlwjeb.dss,XL204
- '<SYSTEM32>\rundll32.exe' %ALLUSERSPROFILE%\Application Data\gjlwjeb.dss,XL200
- %ALLUSERSPROFILE%\Application Data\bejwljg.bxx
- %TEMP%\gjlwjeb.dss
- %ALLUSERSPROFILE%\Application Data\gjlwjeb.dss
- <SYSTEM32>\PerfStringBackup.TMP
- '37.##9.53.244':80