Техническая информация
- <SYSTEM32>\mshta.exe vbscript:msgbox("┤╦╬─╝■╥╤╦Ё╗╡",0,"╧╡═│╠с╩╛")(window.close)
- <SYSTEM32>\ftp.exe -s:ftp.txt
- <SYSTEM32>\taskkill.exe /im taskcore.exe /im system.exe
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\b.bat" "
- <SYSTEM32>\net.exe stop sharedaccess
- <SYSTEM32>\net1.exe stop sharedaccess
- %TEMP%\1.tmp\123.txt
- %TEMP%\1.tmp\ftp.txt
- %TEMP%\1.tmp\b.bat
- %TEMP%\1.tmp\b.bat
- %TEMP%\1.tmp\123.txt
- %TEMP%\1.tmp\ftp.txt
- 'va#####le.limewebs.com':21
- 'localhost':1037
- DNS ASK va#####le.limewebs.com
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''