Техническая информация
- %WINDIR%\Tasks\Windows Defender Daily Update.job
- %WINDIR%\Tasks\Windows Defender Daily Checking.job
- %APPDATA%\Script.exe
- %APPDATA%\autorun.exe
- %APPDATA%\curl.exe
- %APPDATA%\Script.exe
- %APPDATA%\autorun.exe
- ClassName: 'EDIT' WindowName: ''
- '%APPDATA%\Script.exe' and Settings\\%USERNAME%\\Application Data\\Script.exe\" -s -p54321
- '%APPDATA%\autorun.exe' and Settings\\%USERNAME%\\Application Data\\autorun.exe\"