Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Background Optimization' = '%ALLUSERSPROFILE%\SupportFiles\ZeroThreat.exe'
- <SYSTEM32>\tasks\driver update checker
- <SYSTEM32>\tasks\background optimization
- %ALLUSERSPROFILE%\supportfiles\zerothreat.exe
- %ALLUSERSPROFILE%\supportfiles\yourscript.bat
- %ALLUSERSPROFILE%\supportfiles\yourscript.vbs
- '<SYSTEM32>\cscript.exe' //B //Nologo %ALLUSERSPROFILE%\SupportFiles\YourScript.vbs
- '<SYSTEM32>\cmd.exe' /c schtasks /create /tn "Driver Update Checker" /tr "\"%ALLUSERSPROFILE%\SupportFiles\ZeroThreat.exe\" --scheduler" /sc minute /mo 5 /f /ru "%username%"
- '<SYSTEM32>\schtasks.exe' /create /tn "Driver Update Checker" /tr "\"%ALLUSERSPROFILE%\SupportFiles\ZeroThreat.exe\" --scheduler" /sc minute /mo 5 /f /ru "user"
- '<SYSTEM32>\cmd.exe' /c schtasks /create /tn "Background Optimization" /tr "cscript //B //Nologo "%ALLUSERSPROFILE%\SupportFiles\YourScript.vbs"" /sc minute /mo 3 /f /ru "%username%"
- '<SYSTEM32>\schtasks.exe' /create /tn "Background Optimization" /tr "cscript //B //Nologo "%ALLUSERSPROFILE%\SupportFiles\YourScript.vbs"" /sc minute /mo 3 /f /ru "user"
- '<SYSTEM32>\taskeng.exe' {CF741F7B-D6B2-4DEF-838D-886964AB3086} S-1-5-21-3691498038-2086406363-2140527554-1000:sfpjyykjn\user:Interactive:[1]
- '<SYSTEM32>\cscript.exe' //B //Nologo %ALLUSERSPROFILE%\SupportFiles\YourScript.vbs (со скрытым окном)