Техническая информация
- '<SYSTEM32>\wins\svchost.exe'
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.109
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.246
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.146
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.236
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.146
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.234
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.69
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.88
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.140
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.100
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.60
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.137
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.105
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.10
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.38
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.230
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.24
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.79
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.237
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.21
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.239
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.225
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.223
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.231
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.169
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.12
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.58
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.120
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.186
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.133
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.53
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.196
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.184
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.71
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.8
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.189
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.157
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.246
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.227
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.107
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.38
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.190
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.190
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.132
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.238
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.141
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.37
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.130
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.166
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.11
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.108
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.211
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.163
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.151
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.224
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.115
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.215
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.174
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.163
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.247
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.7
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.161
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.223
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.133
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.49
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.148
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.43
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.2.6
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.64
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\NL587.bat" "
- '<SYSTEM32>\ping.exe' 0.0.0.0
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.174
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.76
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.217
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.151
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.165
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.73
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.149
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.39
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.150
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.236
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.14
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.82
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.69
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.212
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.75
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.155
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.39
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.229
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.168
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.84
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.124
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.132
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.138
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.160
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.2.4
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.6
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.243
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.6
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.139
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.134
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.65
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.189
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.108
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.0.229
- '<SYSTEM32>\cscript.exe' <SYSTEM32>\wins\WMI.vbe 10.0.1.20
- <SYSTEM32>\wins\WMI.vbe
- %TEMP%\NL587.bat
- <SYSTEM32>\wins\svchost.exe
- '<IP-адрес в локальной сети>':135
- DNS ASK 73.#.#.10.in-addr.arpa
- DNS ASK 39.#.#.10.in-addr.arpa
- DNS ASK 14#.#.#.10.in-addr.arpa
- DNS ASK 43.#.#.10.in-addr.arpa
- DNS ASK 15#.#.#.10.in-addr.arpa
- DNS ASK 17#.#.#.10.in-addr.arpa
- DNS ASK 6.#.#.#0.in-addr.arpa
- DNS ASK 76.#.#.10.in-addr.arpa