Техническая информация
- '<SYSTEM32>\taskkill.exe' /F /IM client.exe
- '%WINDIR%\GBClient.exe'
- '<SYSTEM32>\cmd.exe' /c %WINDIR%\BootPC.bat
- %TEMP%\aut3.tmp
- %WINDIR%\GBClient.exe
- %TEMP%\aut4.tmp
- %WINDIR%\BootPC.bat
- %TEMP%\aut1.tmp
- %HOMEPATH%\Desktop\好.123.exe
- %TEMP%\aut2.tmp
- %TEMP%\aut4.tmp
- %WINDIR%\BootPC.bat
- %TEMP%\aut3.tmp
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- 'do##.nxwb.net':9558
- DNS ASK do##.nxwb.net
- ClassName: '' WindowName: ''