Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\scvshots.lnk
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- '<SYSTEM32>\net1.exe' stop WinDefend
- '<SYSTEM32>\net1.exe' stop security center
- '<SYSTEM32>\net.exe' stop WinDefend
- '<SYSTEM32>\netsh.exe' firewall set opmode disable
- '<SYSTEM32>\net.exe' stop security center
- %APPDATA%\<Имя файла>.exe
- %TEMP%\~DF45E7.tmp
- %TEMP%\~DF45E7.tmp