Техническая информация
- '<SYSTEM32>\taskkill.exe' /F /IM VistaraShield.exe
- '<SYSTEM32>\taskkill.exe' /F /IM avupdate.exe
- %TEMP%\nsf2.tmp
- %TEMP%\~nsu.tmp\Au_.exe
- %TEMP%\nsy4.tmp
- %TEMP%\nse5.tmp\UserInfo.dll
- %TEMP%\nse5.tmp\nsExec.dll
- %TEMP%\nse5.tmp\ns6.tmp
- %TEMP%\nse5.tmp\EventLog.dll
- %TEMP%\nse5.tmp\SimpleSC.dll
- %TEMP%\nse5.tmp\ExecCmd.dll
- %TEMP%\nse5.tmp\KillProc.dll
- %TEMP%\nse5.tmp\ns6.tmp
- ClassName: '' WindowName: ''
- '%TEMP%\~nsu.tmp\Au_.exe' _?=<Текущая директория>\
- '%TEMP%\nse5.tmp\ns6.tmp' cscript "<Текущая директория>\bin\pm_webpost.vbe" "uninstall" "Vistara Agent uninstalled in server by %USERNAME%"
- '<SYSTEM32>\cscript.exe' "<Текущая директория>\bin\pm_webpost.vbe" "uninstall" "Vistara Agent uninstalled in server by %USERNAME%"
- '<SYSTEM32>\cmd.exe' /C taskkill /F /IM VistaraShield.exe
- '<SYSTEM32>\cmd.exe' /C taskkill /F /IM avupdate.exe