Техническая информация
- %WINDIR%\Tasks\At4.job
- %WINDIR%\Tasks\At5.job
- %WINDIR%\Tasks\At3.job
- %WINDIR%\Tasks\At1.job
- %WINDIR%\Tasks\At2.job
- <SYSTEM32>\at.exe 12:34 cmd /c "ren <SYSTEM32>\rasauto.dll 4F3X & copy <SYSTEM32>\C2H3 <SYSTEM32>\rasauto.dll & sc start rasauto & net start rasauto"
- <SYSTEM32>\at.exe 12:34 cmd /c "copy <SYSTEM32>\C2H3 <SYSTEM32>\dllcache\rasauto.dll & copy <SYSTEM32>\C2H3 %WINDIR%\ServicePackFiles\i386\rasauto.dll"
- <SYSTEM32>\at.exe 12:33 cmd /c "del %WINDIR%\ServicePackFiles\i386\rasauto.dll"
- <SYSTEM32>\at.exe 12:33 cmd /c "del <SYSTEM32>\dllcache\rasauto.dll"
- <SYSTEM32>\at.exe 12:33 cmd /c "del <SYSTEM32>\4F3X"