Техническая информация
- <SYSTEM32>\wbem\scrcons.exe -Embedding
- <SYSTEM32>\cscript.exe /nologo "%TEMP%\\~temp.vbs"
- %TEMP%\~temp.vbs
- %TEMP%\~temp.vbs
- 'ch#####brain.shop.co':80
- 'localhost':1035
- ch#####brain.shop.co/count/count.php?m=########################################
- DNS ASK wpad.localdomain
- DNS ASK ch#####brain.shop.co