Техническая информация
- '<SYSTEM32>\attrib.exe' +r +a +h +s <DRIVERS>\etc\hosts
- '<SYSTEM32>\wscript.exe' "<DRIVERS>\etc\ok.js"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\install.cmd" "
- '<SYSTEM32>\attrib.exe' -r -a -h -s <DRIVERS>\etc\hosts
- <DRIVERS>\etc\ok.js
- %TEMP%\hosts
- %TEMP%\install.cmd
- <DRIVERS>\etc\hosts
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'