Техническая информация
- %WINDIR%\Tasks\security.job
- <SYSTEM32>\schtasks.exe /create /tn "security" /sc minute /mo 15 /ru "NT AUTHORITY\SYSTEM" /tr %WINDIR%/ip.bat
- <SYSTEM32>\ipconfig.exe /all
- <SYSTEM32>\netsh.exe firewall add allowedprogram "%WINDIR%\svchost.exe" "Remote %USERNAME% Server" ENABLE
- %WINDIR%\ip.txt
- %TEMP%\~1.bat
- %TEMP%\~1.bat
- %TEMP%\~1.bat