Техническая информация
- '<SYSTEM32>\net.exe' stop "automatic updates"
- C:\remprof.exe
- %TEMP%\aut1.tmp
- <SYSTEM32>\CatRoot2\edb00014.log
- <SYSTEM32>\CatRoot2\edb00015.log
- <SYSTEM32>\CatRoot2\edb00016.log
- <SYSTEM32>\CatRoot2\edb00013.log
- <SYSTEM32>\CatRoot2\edb00010.log
- <SYSTEM32>\CatRoot2\edb00011.log
- <SYSTEM32>\CatRoot2\edb00012.log
- <SYSTEM32>\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp
- <SYSTEM32>\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
- <SYSTEM32>\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
- <SYSTEM32>\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
- <SYSTEM32>\CatRoot2\edb00017.log
- <SYSTEM32>\CatRoot2\res1.log
- <SYSTEM32>\CatRoot2\res2.log
- %WINDIR%\SoftwareDistribution\DataStore\Logs\edb.chk
- %WINDIR%\SoftwareDistribution\DataStore\Logs\edb.log
- %WINDIR%\SoftwareDistribution\DataStore\Logs\res1.log
- %WINDIR%\SoftwareDistribution\ReportingEvents.log
- %TEMP%\aut1.tmp
- C:\remprof.exe
- %WINDIR%\SoftwareDistribution\DataStore\DataStore.edb
- <SYSTEM32>\CatRoot2\edb0000D.log
- <SYSTEM32>\CatRoot2\edb0000E.log
- <SYSTEM32>\CatRoot2\edb0000F.log
- <SYSTEM32>\CatRoot2\edb.log
- %WINDIR%\SoftwareDistribution\DataStore\Logs\res2.log
- <SYSTEM32>\CatRoot2\dberr.txt
- <SYSTEM32>\CatRoot2\edb.chk
- 'C:\remprof.exe' /D:30 /EXCLUDE:Administrator,mcp
- '<SYSTEM32>\net1.exe' start "automatic updates"
- '<SYSTEM32>\net.exe' start "automatic updates"
- '<SYSTEM32>\net1.exe' stop "automatic updates"