Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'WindowsUpdate' = '<Полный путь к файлу>'
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden -Command "Set-MpPreference -DisableRealtimeMonitoring $true -ErrorAction SilentlyContinue"
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath $env:APPDATA -ErrorAction SilentlyContinue"
- '<SYSTEM32>\cmd.exe' /c powershell -WindowStyle Hidden -Command "Set-MpPreference -DisableRealtimeMonitoring $true -ErrorAction SilentlyContinue"
- '<SYSTEM32>\cmd.exe' /c powershell -WindowStyle Hidden -Command "Add-MpPreference -ExclusionPath $env:APPDATA -ErrorAction SilentlyContinue"