![]() ![]() Spawned process "Run.exe" with commandline "schtasks /change /TN "AnySendUpdateLogIn" /RL HIGHEST" ( Show Process) Spawned process "schtasks.exe" with commandline "schtasks /change /TN "AnySendUpdate" /RL HIGHEST" ( Show Process) Spawned process "Run.exe" with commandline "schtasks /change /TN "AnySendUpdate" /RL HIGHEST" ( Show Process) Spawned process "schtasks.exe" with commandline "schtasks /Create /SC Onlogon /TN "AnySendUpdateLogin" /TR "\"%PROGRAMFILES%\AnySend\AnySendUpdater.exe\"" /RU system" ( Show Process) ![]() Spawned process "Run.exe" with commandline "schtasks /Create /SC Onlogon /TN "AnySendUpdateLogin" /TR "\"%PROGRAMFILES%\AnySend\AnySendUpdater.exe\"" /RU system" ( Show Process) Spawned process "schtasks.exe" with commandline "schtasks /Create /SC Daily /TN "AnySendUpdate" /TR "\"%PROGRAMFILES%\AnySend\AnySendUpdater.exe\"" /RU system" ( Show Process) Spawned process "Run.exe" with commandline "schtasks /Create /SC Daily /TN "AnySendUpdate" /TR "\"%PROGRAMFILES%\AnySend\AnySendUpdater.exe\"" /RU system" ( Show Process) Spawned process "schtasks.exe" with commandline "schtasks /Delete /TN "AnySendUpdateLogin" /F" ( Show Process) Spawned process "Run.exe" with commandline "schtasks /Delete /TN "AnySendUpdateLogin" /F" ( Show Process) ![]() Spawned process "schtasks.exe" with commandline "schtasks /Delete /TN "AnySendUpdate" /F" ( Show Process) Spawned process "Run.exe" with commandline "schtasks /Delete /TN "AnySendUpdate" /F" ( Show Process) Multiple malicious artifacts seen in the context of different hosts ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |