Техническая информация
- %TEMP%\aut1.tmp
- %WINDIR%\schemas\EAPEl\banner.jpg
- %TEMP%\aut2.tmp
- %WINDIR%\schemas\EAPEl\Deactivator.exe
- <DRIVERS>\etc\Package Cache\Deactivator.bat
- <DRIVERS>\etc\Package Cache\KillDuplicate.cmd
- <DRIVERS>\etc\Package Cache\SetACLx64.exe
- <DRIVERS>\etc\Package Cache\SetACLx86.exe
- <DRIVERS>\etc\Package Cache\KillDuplicate.cmd
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- '%WINDIR%\schemas\EAPEl\Deactivator.exe'
- '<DRIVERS>\etc\Package Cache\SetACLx86.exe' -on "HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Info" -ot reg -actn setowner -ownr "n:Everyone" -actn clear -clr dacl,sacl
- '<DRIVERS>\etc\Package Cache\SetACLx86.exe' -on "HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000006\settings\Ekrn\Info" -ot reg -actn setowner -ownr "n:Everyone" -actn clear -clr dacl,sacl
- '<SYSTEM32>\cmd.exe' /c ""<DRIVERS>\etc\Package Cache\KillDuplicate.cmd" "<DRIVERS>\etc\Package Cache" "Deactivator.exe""
- '<SYSTEM32>\cmd.exe' /c ""<DRIVERS>\etc\Package Cache\Deactivator.bat" "
- '<SYSTEM32>\net.exe' FILE
- '<SYSTEM32>\net1.exe' FILE
- '<SYSTEM32>\reg.exe' DELETE "HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Info" /v "WebLicensePublicId" /f