Техническая информация
- '<SYSTEM32>\ftp.exe' -s:<SYSTEM32>\cftp.txt
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\cftp.bat
- '<SYSTEM32>\net1.exe' start sharedaccess
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\soft04.bat
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\soft03.bat
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\soft02.bat
- <SYSTEM32>\soft02.bat
- <SYSTEM32>\cftp.txt
- <SYSTEM32>\cftp.bat
- <SYSTEM32>\soft04.bat
- <SYSTEM32>\soft03.bat
- %TEMP%\~DF106D.tmp
- <SYSTEM32>\soft03.bat
- '22#.#14.218.145':21
- 'localhost':1036
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'