Техническая информация
- '%TEMP%\cmd.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\cmd.exe" "cmd.exe" ENABLE
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fb082e3c5ba1f1d9eba29c616bab7e14.exe
- %TEMP%\cmd.exe
- DNS ASK dn#.##ftncsi.com
- DNS ASK za#####ii.linkpc.net
- ClassName: 'Shell_TrayWnd' WindowName: ''