Техническая информация
- '<SYSTEM32>\net1.exe' stop SharedAccess
- '<SYSTEM32>\sc.exe' config wscsvc start= Disabled
- '<SYSTEM32>\ftp.exe' -s:ppo.dat
- '<SYSTEM32>\sc.exe' config SharedAccess start= Disabled
- '<SYSTEM32>\cmd.exe' /c ""C:\Download\new_winxp.bat" "
- '<SYSTEM32>\wscript.exe' "C:\Download\3.vbs"
- '<SYSTEM32>\net1.exe' stop wscsvc
- '<SYSTEM32>\net1.exe' user
- C:\Download\ppo.dat
- C:\Download\3.vbs
- C:\Download\new_winxp.bat
- C:\Download\ppo.dat
- 'www.ds###5ffa.com':21
- 'localhost':1037
- DNS ASK www.ds###5ffa.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'