Техническая информация
- %WINDIR%\Tasks\security.job
- '<SYSTEM32>\schtasks.exe' /create /tn "security" /sc minute /mo 30 /ru "NT AUTHORITY\SYSTEM" /tr "%WINDIR%\ping.bat
- '<SYSTEM32>\schtasks.exe' /create /tn "security" /sc minute /mo 30 /ru "NT AUTHORITY\SYSTEM" /tr "%WINDIR%\sysfiles\send_IP.exe"
- '<SYSTEM32>\find.exe' "ProductName"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\WinVer.bat" "
- '<SYSTEM32>\reg.exe' query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName
- C:\ping.bat
- %TEMP%\1.tmp\WinVer.bat
- %TEMP%\1.tmp\WinVer.bat