Техническая информация
- <SYSTEM32>\tasks\windowsupdates
- 're##ry.co':443
- 're##ry.co':443
- DNS ASK re##ry.co
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "WindowsUpdates" /tr "c:\parche\tictac.exe /quiet" /sc onlogon /delay 0001:00 /ru "NT AUTHORITY\System" /rl highest /f' (со скрытым окном)
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "WindowsUpdates" /tr "c:\parche\tictac.exe /quiet" /sc onlogon /delay 0001:00 /ru "NT AUTHORITY\System" /rl highest /f