Техническая информация
- Средство контроля пользовательских учетных записей (UAC)
- '<SYSTEM32>\sc.exe' config wuauserv start= disabled
- '<SYSTEM32>\sc.exe' delete wuauserv
- '<SYSTEM32>\sc.exe' stop MsMpSvc
- '<SYSTEM32>\sc.exe' config wscsvc start= disabled
- '<SYSTEM32>\sc.exe' delete wscsvc
- '<SYSTEM32>\sc.exe' stop wuauserv
- '<SYSTEM32>\sc.exe' config MsMpSvc64 start= disabled
- '<SYSTEM32>\sc.exe' delete MsMpSvc64
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\sc.exe' config MsMpSvc start= disabled
- '<SYSTEM32>\sc.exe' delete MsMpSvc
- '<SYSTEM32>\sc.exe' stop MsMpSvc64
- '<SYSTEM32>\sc.exe' stop wscsvc
- '<SYSTEM32>\sc.exe' stop MpsSvc
- '<SYSTEM32>\sc.exe' config MpsSvc start= disabled
- '<SYSTEM32>\sc.exe' delete MpsSvc
- '<SYSTEM32>\sc.exe' stop SharedAccess
- '<SYSTEM32>\sc.exe' config SharedAccess start= disabled
- '<SYSTEM32>\sc.exe' delete SharedAccess
- '<SYSTEM32>\sc.exe' stop WinDefend
- '<SYSTEM32>\sc.exe' config WinDefend start= disabled
- '<SYSTEM32>\sc.exe' delete WinDefend
- '<SYSTEM32>\sc.exe' stop Windows Defender (managed by AlwaysUpService)
- '<SYSTEM32>\sc.exe' config Windows Defender (managed by AlwaysUpService) start= disabled
- '<SYSTEM32>\sc.exe' delete Windows Defender (managed by AlwaysUpService)
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini