Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '<LS_APPDATA>\WL Pro\flashplayer.exe'
- <SYSTEM32>\shutdown.exe -r -f -t "3" -c "┬р°р ъюяш Windows чрсыюъшЁютрэр!"
- <SYSTEM32>\cmd.exe /c install.bat
- <LS_APPDATA>\WL Pro\flashplayer.exe
- <Current directory>\install.bat
- <Current directory>\flashplayer.exe
- '62.##9.17.233':80
- 62.##9.17.233/gate.php