Техническая информация
- %WINDIR%\Tasks\svchost.job
- %WINDIR%\svchost\svchost.exe -Ldp 1111 -e cmd.exe
- <SYSTEM32>\schtasks.exe /run /tn "svchost
- <SYSTEM32>\netsh.exe firewall add portopening TCP 1111 "Skype"
- <SYSTEM32>\schtasks.exe /create /tn "svchost" /tr "%WINDIR%\svchost\svchost.bat" /sc onstart /sd 12/12/2008 /ru System
- <SYSTEM32>\wscript.exe "%WINDIR%\svchost\new.vbs"
- <SYSTEM32>\net1.exe start schedule
- %WINDIR%\svchost\svchost.$$A
- %WINDIR%\svchost\new.$$A
- ClassName: 'InstItClass' WindowName: ''