Техническая информация
- %WINDIR%\Tasks\Update.job
- [<HKLM>\SYSTEM\ControlSet001\Services\Schedule] 'Start' = '00000002'
- '<SYSTEM32>\schtasks.exe' /create /tn "Update" /sc minute /mo 15 /ru "NT AUTHORITY\SYSTEM" /tr %TEMP%\s8467.exe
- '<SYSTEM32>\sc.exe' start schedule
- '<SYSTEM32>\sc.exe' config schedule start= auto
- %TEMP%\s8467.exe