Техническая информация
- <SYSTEM32>\tasks\net_rundll_32
- '<SYSTEM32>\cmd.exe' /S /D /c" echo n"
- '<SYSTEM32>\schtasks.exe' /Create /TN "net_rundll_32" /TR "'start /d<SYSTEM32> /i /min /high MY_DOCUMENT_FOTO.jpg.cmd'" /SC ONEVENT /EC "Microsoft-Windows-DriverFrameworks-UserMode/Operational" /MO "*[System[Provider[@N...
- '<SYSTEM32>\reg.exe' del "hkcu\Control Panel\Mouse" /v SwapMouseButtons /t reg_sz /d 0 /f
- '<SYSTEM32>\reg.exe' del "hkcu\Control Panel\Mouse" /v MouseTrails /t reg_sz /d 0 /f