Техническая информация
- '%TEMP%\1.tmp\a.exe' cmdwait 5000 savescreenshot "C:\Users\Public\c.jpg"
- '<SYSTEM32>\wscript.exe' "%WINDIR%\i.vbs"
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%WINDIR%\b.exe" b enable
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\cs.bat" "
- %WINDIR%\i.vbs
- %WINDIR%\d.txt
- %TEMP%\1.tmp\a.exe
- %TEMP%\1.tmp\cs.bat
- %TEMP%\1.tmp\b.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'