Техническая информация
- '<SYSTEM32>\taskkill.exe' /f /im rutserv.exe
- '<SYSTEM32>\taskkill.exe' /f /im rfusclient.exe
- C:\rutserv.exe
- C:\vp8encoder.dll
- C:\regedit.reg
- C:\vp8decoder.dll
- C:\rfusclient.exe
- C:\ins.bat
- ClassName: '' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '<SYSTEM32>\cmd.exe' /c ""C:\ins.bat" "
- '<SYSTEM32>\reg.exe' delete "HKLM\SYSTEM\Remote Manipulator System" /f
- '<SYSTEM32>\attrib.exe' +h +s "C:\2\tempo"
- '%WINDIR%\regedit.exe' /s "regedit.reg"