Техническая информация
- %WINDIR%\Tasks\At4.job
- %WINDIR%\Tasks\At5.job
- %WINDIR%\Tasks\At3.job
- %WINDIR%\Tasks\At1.job
- %WINDIR%\Tasks\At2.job
- '<SYSTEM32>\at.exe' 13:28 cmd /c "ren <SYSTEM32>\rasauto.dll 4F3X & copy <SYSTEM32>\C2H3 <SYSTEM32>\rasauto.dll & sc start rasauto & net start rasauto"
- '<SYSTEM32>\at.exe' 13:28 cmd /c "copy <SYSTEM32>\C2H3 <SYSTEM32>\dllcache\rasauto.dll & copy <SYSTEM32>\C2H3 %WINDIR%\ServicePackFiles\i386\rasauto.dll"
- '<SYSTEM32>\at.exe' 13:27 cmd /c "del %WINDIR%\ServicePackFiles\i386\rasauto.dll"
- '<SYSTEM32>\at.exe' 13:27 cmd /c "del <SYSTEM32>\4F3X"
- '<SYSTEM32>\at.exe' 13:27 cmd /c "del <SYSTEM32>\dllcache\rasauto.dll"