Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\pBOsqIyIuHyVars.exe
- %HOMEPATH%\Start Menu\Programs\Startup\pBOsqIyIuHyVars.exe
- 'rg##st.net':80
- 'wp#d':80
- rg##st.net/download/55021769/11b9b08c89e2bed60bc8f22f96999b571ea6526a/%D8%BA%D9%8A%D8%B1%20%D9%85%D8%B4%D9%81%D8%B1.exe
- wp#d/wpad.dat
- DNS ASK rg##st.net
- DNS ASK wp#d