Техническая информация
- <SYSTEM32>\wscript.exe ""%TEMP%\temp1.vbs""
- <SYSTEM32>\wscript.exe ""%TEMP%\temp2.vbs""
- <SYSTEM32>\wscript.exe ""%TEMP%\temp.vbs""
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\yes.bat" "
- <SYSTEM32>\ipconfig.exe /all
- %TEMP%\temp2.vbs
- %TEMP%\temp.vbs
- %TEMP%\temp1.vbs
- %TEMP%\1.tmp\yes.bat
- C:\ip.txt
- %TEMP%\1.tmp\yes.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''