Техническая информация
- %WINDIR%\Tasks\Malwarebytes Scheduled Scan.job
- %WINDIR%\Tasks\Malwarebytes Scheduled Update.job
- <SYSTEM32>\schtasks.exe /create /ru %USERNAME% /rp admin /tn "Malwarebytes Scheduled Scan" /tr "\"%PROGRAM_FILES%\Malwarebytes' Anti-Malware\mbam.exe\" /fullauto" /sc daily /st 03:15:00
- <SYSTEM32>\schtasks.exe /create /ru %USERNAME% /rp admin /tn "Malwarebytes Scheduled Update" /tr "\"%PROGRAM_FILES%\Malwarebytes' Anti-Malware\mbam.exe\" /runupdate" /sc daily /st 03:00:00
- <SYSTEM32>\wscript.exe "<LS_APPDATA>\Temp\EGWXWECOJK.vbs"
- <LS_APPDATA>\Temp\EGWXWECOJK.vbs
- <LS_APPDATA>\Temp\EGWXWECOJK.vbs