Техническая информация
- <SYSTEM32>\tasks\mciosorft windows viuser cleaner
- %WINDIR%\fonts\1fsds1.exe
- %APPDATA%\microsoft\windows\start menu\programs\j111.whc
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "Mciosorft Windows viuser cleaner" /tr "%WINDIR%\Fonts\1fsds1.exe" /sc "ONLOGON"' (со скрытым окном)
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "Mciosorft Windows viuser cleaner" /tr "%WINDIR%\Fonts\1fsds1.exe" /sc "ONLOGON"