Техническая информация
- '<SYSTEM32>\sc.exe' stop Serv
- '<SYSTEM32>\sc.exe' stop WMIservers
- '<SYSTEM32>\sc.exe' delete ServiceMains
- '<SYSTEM32>\sc.exe' stop ServiceMains
- '<SYSTEM32>\sc.exe' stop Servc
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\fonts\mzd.bat" "
- '<SYSTEM32>\sc.exe' stop WMIserver
- '<SYSTEM32>\sc.exe' stop Systemss
- %WINDIR%\Fonts\lsass.exe
- %WINDIR%\Fonts\svchost.exe
- %TEMP%\xsfxdel~.exe
- %WINDIR%\Fonts\mzd.bat
- %WINDIR%\Fonts\lsass.exe