Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<SYSTEM32>\ftp.exe' = '<SYSTEM32>\ftp.exe:*:Enabled:System Windows'
- <SYSTEM32>\netsh.exe firewall add allowedprogram "MPR.exe" "Windows" ENABLE
- <SYSTEM32>\ftp.exe -n -s:"%TEMP%\temp\ftp.txt"
- <SYSTEM32>\netsh.exe firewall add allowedprogram "<SYSTEM32>\ftp.exe" "System Windows" ENABLE
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\mp.bat" "
- <SYSTEM32>\attrib.exe +h +s "%TEMP%\temp"
- %TEMP%\1.tmp\mp.bat
- %TEMP%\1.tmp\mp.bat