Техническая информация
- '%TEMP%\$smrt_inst\ac_stp.exe' /S
- '%TEMP%\$smrt_inst\_AAct.exe'
- '%WINDIR%\explorer.exe'
- '<SYSTEM32>\netsh.exe' advfirewall firewall delete rule name=Action
- '<SYSTEM32>\charmap.exe'
- '<SYSTEM32>\rundll32.exe' fldrclnr.dll,Wizard_RunDLL
- '<SYSTEM32>\sc.exe' stop ACTION_SVC
- '<SYSTEM32>\sc.exe' config ACTION_SVC start= disabled
- '<SYSTEM32>\netsh.exe' advfirewall firewall delete rule name=Blockit
- '<SYSTEM32>\sc.exe' delete ACTION_SVC
- %WINDIR%\Explorer.EXE
- %HOMEPATH%\Desktop\Mirillis Action!.lnk
- %ProgramFiles%\Mirillis\Action!\Action Crack.exe
- %TEMP%\$smrt_inst\Action Crack.exe
- %TEMP%\$smrt_inst\_AAct.exe
- %TEMP%\$smrt_inst\ac_stp.exe
- <DRIVERS>\etc\hosts
- ClassName: 'Action_WndClass_1000' WindowName: 'Action!'
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'CSCHiddenWindow' WindowName: ''
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Proxy Desktop' WindowName: ''
- ClassName: 'BaseBar' WindowName: 'ChanApp'