Техническая информация
- '%TEMP%\nso2.tmp\ns4.tmp' <SYSTEM32>\cmd.exe /C Sc delete AdobeFlashPlayerHash
- '%TEMP%\nso2.tmp\ns3.tmp' <SYSTEM32>\cmd.exe /C net stop AdobeFlashPlayerHash
- '<SYSTEM32>\cmd.exe' /C Sc delete AdobeFlashPlayerHash
- '<SYSTEM32>\sc.exe' delete AdobeFlashPlayerHash
- '<SYSTEM32>\net1.exe' stop AdobeFlashPlayerHash
- '<SYSTEM32>\cmd.exe' /C net stop AdobeFlashPlayerHash
- '<SYSTEM32>\net.exe' stop AdobeFlashPlayerHash
- %TEMP%\nso2.tmp\ns3.tmp
- %TEMP%\nso2.tmp\ns4.tmp
- %TEMP%\nso2.tmp\nsExec.dll
- %WINDIR%\HhSm\parameters.ini
- %WINDIR%\HhSm\Client.exe
- %TEMP%\nso2.tmp\ns3.tmp
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '#32770' WindowName: ''