Technical Information
- '%WINDIR%\syswow64\netsh.exe' firewall add portopening TCP 80 HTTP
- http://g3####3.narod.ru/tmp.txt
- DNS ASK no###ad.h18.ru
- DNS ASK g3####3.narod.ru
- '%WINDIR%\syswow64\cmd.exe' /c netsh firewall add portopening TCP 80 HTTP' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c netsh firewall add portopening TCP 80 HTTP