Техническая информация
- <SYSTEM32>\tasks\windows portable device shell extension autoplay handler{c0l6q2r0h4j-h2j5m8q8h7-r8r0e7w3h2}
- %APPDATA%\microsoft\windows\wpds\wpdsshellautoplay.exe
- %APPDATA%\microsoft\windows\wpds\6745532435646576575236
- %APPDATA%\microsoft\windows\wpds\6745532435646576575236
- %APPDATA%\microsoft\windows\wpds\6745532435646576575236
- '%WINDIR%\syswow64\schtasks.exe' /create /F /sc minute /mo 5 /tn "Windows Portable Device Shell Extension Autoplay Handler{C0L6Q2R0H4J-H2J5M8Q8H7-R8R0E7W3H2}" /tr "%APPDATA%\Microsoft\Windows\WPDS\WPDSShellAutoplay.exe"
- '%WINDIR%\syswow64\schtasks.exe' /Query /XML /TN "Windows Portable Device Shell Extension Autoplay Handler{C0L6Q2R0H4J-H2J5M8Q8H7-R8R0E7W3H2}"