Техническая информация
- %TEMP%\3764.tmp\host_blocker_new.cmd
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\3764.tmp\host_blocker_new.cmd <Полный путь к файлу>"
- '<SYSTEM32>\attrib.exe' -r <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "registeraudials.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "audials.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "188.40.53.196" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "www.in##.de" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "lists.rs-audials.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "www.ns#.##takauf.de" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "securestore.audials.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "www.au###ls.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "secure.element5.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "shop.audials.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "userstats.audials.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\attrib.exe' +r <DRIVERS>\etc\hosts
- '<SYSTEM32>\ipconfig.exe' -flushdns