Техническая информация
- <SYSTEM32>\cmd.exe /c """%TEMP%\selfdel0.bat"" "
- <SYSTEM32>\cmd.exe /c """%TEMP%\1.tmp\batfile.bat"" "
- %TEMP%\selfdel0.bat
- \Device\LanmanRedirector\fr0-wsus-p01*\MAILSLOT\NET\NETLOGON
- %TEMP%\1.tmp\batfile.bat
- %TEMP%\1.tmp\batfile.bat
- 'fr######-p01.localdomain':80
- 'fr######-p01.localdomain':445
- DNS ASK fr######-p01.localdomain