Техническая информация
- %TEMP%\ixp000.tmp\addhostentry.bat
- nul
- '<SYSTEM32>\cmd.exe' /c "AddHostEntry.bat"
- '<SYSTEM32>\net.exe' SESSION
- '<SYSTEM32>\net1.exe' SESSION
- '<SYSTEM32>\findstr.exe' /C:"17#.#49.41.49 zzwobytcmadzlsjzjxgqbeg.pnu_m.edu.sa" "<DRIVERS>\etc\hosts"
- '<SYSTEM32>\ipconfig.exe' /flushdns