Техническая информация
- '<SYSTEM32>\net.exe' stop MsMpSvc
- '<SYSTEM32>\sc.exe' stop wscsvc
- '<SYSTEM32>\net.exe' stop WinDefend
- '<SYSTEM32>\net.exe' stop security center
- '<SYSTEM32>\net1.exe' stop security center
- '<SYSTEM32>\net1.exe' stop WinDefend
- '<SYSTEM32>\net1.exe' stop MsMpSvc
- '<SYSTEM32>\sc.exe' config wuauserv start= disabled
- '<SYSTEM32>\net1.exe' stop MpsSvc
- '<SYSTEM32>\net.exe' stop MpsSvc
- '<SYSTEM32>\taskkill.exe' /im msseces.exe /f
- '<SYSTEM32>\taskkill.exe' /im MpCmdRun.exe /f
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\taskkill.exe' /im MSASCui.exe /f
- '<SYSTEM32>\taskkill.exe' /im ConfigSecurityPolicy.exe /f
- '<SYSTEM32>\taskkill.exe' /im NisSrv.exe /f
- '<SYSTEM32>\taskkill.exe' /im MsMpEng.exe /f
- '<SYSTEM32>\sc.exe' stop SharedAccess
- '<SYSTEM32>\taskkill.exe' /im msseoobe.exe /f
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- ClassName: 'RegMonClass' WindowName: ''
- ClassName: 'FileMonClass' WindowName: ''
- %ALLUSERSPROFILE%\Application Data\TEMP\RAIDTest
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- ClassName: '' WindowName: ''