Техническая информация
- '<SYSTEM32>\net1.exe' stop sharedaccess
- '<SYSTEM32>\ftp.exe' -s:ftp.txt
- '<SYSTEM32>\net.exe' stop sharedaccess
- '<SYSTEM32>\wscript.exe' <DRIVERS>\softdown.vbs
- '<SYSTEM32>\cmd.exe' /c ""<DRIVERS>\softdown.bat" "
- <DRIVERS>\ftp.txt
- <DRIVERS>\softdown.vbs
- <DRIVERS>\softdown.bat
- <DRIVERS>\ftp.txt
- '97#d.cn':21
- 'localhost':1037
- DNS ASK 97#d.cn
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'