Техническая информация
- svhost.exe
- <Текущая директория>\del.bat
- %TEMP%\svhost.exe
- '%TEMP%\svhost.exe'
- '<SYSTEM32>\attrib.exe' +h +s "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\taskhosts.exe"
- '<SYSTEM32>\cmd.exe' /c type NUL>del.bat & (Echo @echo off & Echo TIMEOUT 2 & Echo del /q "%TEMP%\svhost.exe" & Echo del /q del.bat & exit)> del.bat & exit
- '<SYSTEM32>\cmd.exe' /c attrib +h +s "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\taskhosts.exe" & exit
- '<SYSTEM32>\cmd.exe' /c cmd /C copy "%TEMP%\svhost.exe" "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\taskhosts.exe" & exit
- '<SYSTEM32>\cmd.exe' /C copy "%TEMP%\svhost.exe" "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\taskhosts.exe"