Техническая информация
- <DRIVERS>\etc\hosts
- 'pt#.#hdlq.com':80
- '<DNS_SERVER>':80
- 'c.##dlq.com':80
- 'a.##dlq.com':80
- 'b.##dlq.com':80
- http://c.##dlq.com/Remote.txt
- http://pT#.#hdlq.com/Remote.txt via pt#.#hdlq.com
- http://a.##dlq.com/Remote.txt
- http://b.##dlq.com/Remote.txt
- DNS ASK c.##dlq.com
- DNS ASK pT#.#hdlq.com
- DNS ASK a.##dlq.com
- DNS ASK b.##dlq.com
- ClassName: '' WindowName: 'GINA Logon'
- '<SYSTEM32>\cmd.exe' /c rd "<DRIVERS>\etcAB1MQ" /S /Q