Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Windows host process.vbs
- '%APPDATA%\System32\svchost.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\co.bat" "
- %APPDATA%\System32\svchost.exe
- %TEMP%\co.bat
- %TEMP%\co.bat
- 'ez#.#ackcom.net':9991
- DNS ASK ez#.#ackcom.net
- ClassName: 'Shell_TrayWnd' WindowName: ''