Техническая информация
- '<SYSTEM32>\net1.exe' /c Cls
- '<SYSTEM32>\net1.exe' /pid=3096
- '<SYSTEM32>\net1.exe' Start Messenger
- '<SYSTEM32>\net1.exe' Send * Status=HIV+
- <SYSTEM32>\net.exe
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\net1.exe
- \Device\LanmanRedirector\WORKGROUP\MAILSLOT\MESSNGR