Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\IntelSystem.bat.lnk
- '<SYSTEM32>\cmd.exe' /c C:\ProgramData\WindowsTask\111.bat
- '<SYSTEM32>\cmd.exe' /c tasklist /NH /FI "IMAGENAME eq taskmgr.exe"
- '<SYSTEM32>\tasklist.exe' /NH /FI "IMAGENAME eq taskmgr.exe"
- 'C:\ProgramData\WindowsTask\hstart.exe' /NOCONSOLE C:\ProgramData\WindowsTask\111.bat
- 'C:\ProgramData\WindowsTask\hstart.exe' /NOCONSOLE 222.bat
- '<SYSTEM32>\cmd.exe' /c 222.bat
- '<SYSTEM32>\attrib.exe' +h +s C:\ProgramData\WindowsTask\*.*
- C:\ProgramData\WindowsTask\run.bat
- C:\ProgramData\WindowsTask\msvcr120.dll
- C:\ProgramData\WindowsTask\fafa.exe
- C:\ProgramData\WindowsTask\222.bat
- C:\ProgramData\WindowsTask\hstart.exe
- C:\ProgramData\WindowsTask\IntelSystem.bat
- C:\ProgramData\WindowsTask\111.bat
- C:\ProgramData\WindowsTask\run.bat
- C:\ProgramData\WindowsTask\fafa.exe
- C:\ProgramData\WindowsTask\msvcr120.dll
- C:\ProgramData\WindowsTask\222.bat
- C:\ProgramData\WindowsTask\hstart.exe
- C:\ProgramData\WindowsTask\IntelSystem.bat
- C:\ProgramData\WindowsTask\111.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''