Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'McAfeeUpdaterUI' = '"%ProgramFiles(x86)%\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey'
Создает следующие сервисы
- [<HKLM>\System\CurrentControlSet\Services\NAIMServInst] 'ImagePath' = '%TEMP%\unz5191.tmp\FramePkg.exe /SignalComplete /LOGDIR="%TEMP%\NAILogs" /Cleanup2="%TEMP%\unz5191.tmp" /WaitFor=2008 /Cur...
- [<HKLM>\System\CurrentControlSet\Services\McAfeeFramework] 'ImagePath' = '"%ProgramFiles(x86)%\McAfee\Common Framework\FrameworkService.exe" /ServiceStart'
- [<HKLM>\System\CurrentControlSet\Services\McAfeeFramework] 'Start' = '00000002'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\nailogs\frminst_mirzslutmcgv.log
- %ProgramFiles(x86)%\mcafee\common framework\frminst.exe
- %ProgramFiles(x86)%\mcafee\common framework\frameworkservice.exe
- %PROGRAMDATA%\mcafee\common framework\db\frameworklog.xsl
- %ProgramFiles(x86)%\mcafee\common framework\componentuserinterface.dll
- %ProgramFiles(x86)%\mcafee\common framework\cmdagent.exe
- %ProgramFiles(x86)%\mcafee\common framework\genevtinf.dll
- %ProgramFiles(x86)%\mcafee\common framework\cleanup.exe
- %ProgramFiles(x86)%\mcafee\common framework\agentplugin.dll
- %PROGRAMDATA%\mcafee\common framework\agent.ini
- %ProgramFiles(x86)%\mcafee\common framework\agent.dll
- %WINDIR%\temp\unz5819.tmp\mctray.exe
- %WINDIR%\temp\unz5819.tmp\jrmac.dll
- %WINDIR%\temp\unz5819.tmp\mcscancheck.exe
- %ProgramFiles(x86)%\mcafee\common framework\0409\agentres.dll
- %WINDIR%\temp\unz5819.tmp\genevtinf64.dll
- %ProgramFiles(x86)%\mcafee\common framework\internetmanager.dll
- %ProgramFiles(x86)%\mcafee\common framework\patchw32.dll
- %ProgramFiles(x86)%\mcafee\common framework\naisign.dll
- %ProgramFiles(x86)%\mcafee\common framework\naxml71.dll
- %ProgramFiles(x86)%\mcafee\common framework\naspipe.dll
- %ProgramFiles(x86)%\mcafee\common framework\naprdmgr.exe
- %ProgramFiles(x86)%\mcafee\common framework\napolicymanager.dll
- %WINDIR%\temp\unz5819.tmp\microsoft.vc80.crt.manifest
- %ProgramFiles(x86)%\mcafee\common framework\frmplugin.dll
- %ProgramFiles(x86)%\mcafee\common framework\nagshr32.dll
- %ProgramFiles(x86)%\mcafee\common framework\nacmnlib71.dll
- %ProgramFiles(x86)%\mcafee\common framework\mcurial.dll
- %ProgramFiles(x86)%\mcafee\common framework\mcscript.exe
- %ProgramFiles(x86)%\mcafee\common framework\management.dll
- %ProgramFiles(x86)%\mcafee\common framework\logging.dll
- %ProgramFiles(x86)%\mcafee\common framework\nainet.dll
- %ProgramFiles(x86)%\mcafee\common framework\listenserver.dll
- %WINDIR%\temp\unz5819.tmp\msvcr80.dll
- %WINDIR%\temp\unz5819.tmp\msvcp80.dll
- %WINDIR%\temp\unz5819.tmp\msvcm80.dll
- %WINDIR%\temp\unz5819.tmp\naitcpp.dll
- %WINDIR%\temp\unz5819.tmp\xmlwrap.dll
- %WINDIR%\temp\unz5819.tmp\componentsubsystem.dll
- %WINDIR%\temp\unz5819.tmp\clientui.dll
- %WINDIR%\temp\unz5819.tmp\cmauires.dll
- %WINDIR%\temp\unz5819.tmp\applib.dll
- %ProgramFiles(x86)%\mcafee\common framework\poevtinf.dll
- %WINDIR%\temp\unz5819.tmp\cmalib.dll
- %WINDIR%\temp\unz5819.tmp\componentframeworkcallback64.dll
- %WINDIR%\temp\unz5819.tmp\msvcp71.dll
- %WINDIR%\temp\unz5819.tmp\msvcr71.dll
- %WINDIR%\temp\unz5819.tmp\epopgpsdk.dll
- %WINDIR%\temp\unz5819.tmp\epopgpsdk.dll.sig
- %WINDIR%\temp\unz5819.tmp\agent64.dll
- %WINDIR%\temp\unz5819.tmp\naitcpp.inf
- %ProgramFiles(x86)%\mcafee\common framework\nailog.dll
- %WINDIR%\temp\unz5819.tmp\componentpolicyenforcement64.dll
- %WINDIR%\temp\unz5819.tmp\logging64.dll
- %WINDIR%\temp\unz5819.tmp\componentsubsystem64.dll
- %WINDIR%\temp\unz5819.tmp\nailog64.dll
- %WINDIR%\temp\unz5819.tmp\naxml64.dll
- %WINDIR%\temp\unz5819.tmp\naspipe64.dll
- %WINDIR%\temp\unz5819.tmp\naprdmgr64.exe
- %WINDIR%\temp\unz5819.tmp\napolicymanager64.dll
- %WINDIR%\temp\unz5819.tmp\internetmanager64.dll
- %WINDIR%\temp\unz5819.tmp\nainet64.dll
- %WINDIR%\temp\unz5819.tmp\agentres64.dll
- %WINDIR%\temp\unz5819.tmp\cmalib64.dll
- %WINDIR%\temp\unz5819.tmp\applib64.dll
- %WINDIR%\temp\unz5819.tmp\secureframeworkfactory64.dll
- %WINDIR%\temp\unz5819.tmp\scheduler64.dll
- %WINDIR%\temp\unz5819.tmp\management64.dll
- %WINDIR%\temp\unz5819.tmp\nacmnlib64.dll
- %ProgramFiles(x86)%\mcafee\common framework\msvcp71.dll
- %TEMP%\nailogs\updaterui_mirzslutmcgv.log
- %ProgramFiles(x86)%\mcafee\common framework\scriptsubsys.dll
- %ProgramFiles(x86)%\mcafee\common framework\microsoft.vc80.crt\msvcm80.dll
- %ProgramFiles(x86)%\mcafee\common framework\nailog64.dll
- %ProgramFiles(x86)%\mcafee\common framework\naxml64.dll
- %ProgramFiles(x86)%\mcafee\common framework\naspipe64.dll
- %ProgramFiles(x86)%\mcafee\common framework\naprdmgr64.exe
- %ProgramFiles(x86)%\mcafee\common framework\microsoft.vc80.crt\msvcr80.dll
- %ProgramFiles(x86)%\mcafee\common framework\napolicymanager64.dll
- %ProgramFiles(x86)%\mcafee\common framework\nacmnlib64.dll
- %ProgramFiles(x86)%\mcafee\common framework\genevtinf64.dll
- %ProgramFiles(x86)%\mcafee\common framework\cmalib64.dll
- %ProgramFiles(x86)%\mcafee\common framework\applib64.dll
- %ProgramFiles(x86)%\mcafee\common framework\secureframeworkfactory64.dll
- %ProgramFiles(x86)%\mcafee\common framework\scheduler64.dll
- %ProgramFiles(x86)%\mcafee\common framework\nainet64.dll
- %ProgramFiles(x86)%\mcafee\common framework\pcrplug.dll
- %ProgramFiles(x86)%\mcafee\common framework\microsoft.vc80.crt\microsoft.vc80.crt.manifest
- %WINDIR%\temp\cle1521.tmp\cleanup.exe
- %PROGRAMDATA%\mcafee\common framework\precompiled.xml
- %PROGRAMDATA%\mcafee\common framework\compiled.xml
- %PROGRAMDATA%\mcafee\common framework\updatehistory.ini
- %PROGRAMDATA%\mcafee\common framework\serversitelist.xml
- %PROGRAMDATA%\mcafee\common framework\sitelist.xml
- %ProgramFiles(x86)%\mcafee\common framework\management64.dll
- %ProgramFiles(x86)%\mcafee\common framework\microsoft.vc80.crt\msvcp80.dll
- %PROGRAMDATA%\mcafee\common framework\db\agent_mirzslutmcgv.log
- %ProgramFiles(x86)%\mcafee\common framework\nmcomn32.dll
- %ProgramFiles(x86)%\mcafee\common framework\naicrt32.dll
- %PROGRAMDATA%\mcafee\common framework\frameworkmanifest.xml
- %ProgramFiles(x86)%\mcafee\common framework\mctray.exe
- %ProgramFiles(x86)%\mcafee\common framework\jrmac.dll
- %PROGRAMDATA%\mcafee\common framework\db\agent_mirzslutmcgv.xml
- %ProgramFiles(x86)%\mcafee\common framework\mcscancheck.exe
- %ProgramFiles(x86)%\mcafee\common framework\logging64.dll
- %ProgramFiles(x86)%\mcafee\common framework\internetmanager64.dll
- %ProgramFiles(x86)%\mcafee\common framework\componentsubsystem64.dll
- %PROGRAMDATA%\mcafee\common framework\updatemain.mcs
- %ProgramFiles(x86)%\mcafee\common framework\0409\scrptres.dll
- %ProgramFiles(x86)%\mcafee\common framework\secureframeworkfactory.dll
- %PROGRAMDATA%\mcafee\common framework\serverdefault.xml
- %PROGRAMDATA%\mcafee\common framework\server.xml
- %PROGRAMDATA%\mcafee\common framework\srpubkey.bin
- %ProgramFiles(x86)%\mcafee\common framework\scheduler.dll
- %ProgramFiles(x86)%\mcafee\common framework\unicows.dll
- %ProgramFiles(x86)%\mcafee\common framework\userspace.dll
- %ProgramFiles(x86)%\mcafee\common framework\updatesubsys.dll
- %ProgramFiles(x86)%\mcafee\common framework\tcsubsys.dll
- %ProgramFiles(x86)%\mcafee\common framework\tchelper.dll
- %ProgramFiles(x86)%\mcafee\common framework\udaterui.exe
- %ProgramFiles(x86)%\mcafee\common framework\updplug.dll
- %PROGRAMDATA%\mcafee\common framework\installmain.mcs
- %WINDIR%\temp\unz5819.tmp\userspace.dll
- %ProgramFiles(x86)%\mcafee\common framework\xmlwrap.dll
- %ProgramFiles(x86)%\mcafee\common framework\0409\cmauires.dll
- %ProgramFiles(x86)%\mcafee\common framework\componentsubsystem.dll
- %ProgramFiles(x86)%\mcafee\common framework\componentpolicyenforcement64.dll
- %ProgramFiles(x86)%\mcafee\common framework\componentframeworkcallback64.dll
- %ProgramFiles(x86)%\mcafee\common framework\0409\agentres64.dll
- %ProgramFiles(x86)%\mcafee\common framework\agent64.dll
- %WINDIR%\syswow64\epopgpsdk.dll.sig
- %ProgramFiles(x86)%\mcafee\common framework\clientui.dll
- %WINDIR%\syswow64\epopgpsdk.dll
- %ProgramFiles(x86)%\mcafee\common framework\0409\updres.dll
- %ProgramFiles(x86)%\mcafee\common framework\naitcpp.dll
- %CommonProgramFiles(x86)%\cisco systems\ciscotrustagent\plugins\install\naitcpp.inf
- %CommonProgramFiles(x86)%\cisco systems\ciscotrustagent\plugins\install\naitcpp.dll
- %ProgramFiles(x86)%\mcafee\common framework\cmalib.dll
- %ProgramFiles(x86)%\mcafee\common framework\applib.dll
- %ProgramFiles(x86)%\mcafee\common framework\msvcr71.dll
- %PROGRAMDATA%\mcafee\common framework\db\prdmgr_mirzslutmcgv.log
- %WINDIR%\temp\unz5819.tmp\updres.dll
- %WINDIR%\temp\unz5819.tmp\srpubkey.bin
- %TEMP%\unz5191.tmp\updplug.dll
- %TEMP%\unz5191.tmp\udaterui.exe
- %TEMP%\unz5191.tmp\tchelper.dll
- %TEMP%\unz5191.tmp\tcsubsys.dll
- %TEMP%\unz5191.tmp\updatesubsys.dll
- %TEMP%\unz5191.tmp\userspace.dll
- %TEMP%\unz5191.tmp\installmain.mcs
- %TEMP%\unz5191.tmp\unicows.dll
- %TEMP%\unz5191.tmp\srpubkey.bin
- %TEMP%\unz5191.tmp\sitelist.xml
- %TEMP%\unz5191.tmp\server.xml
- %TEMP%\unz5191.tmp\secureframeworkfactory.dll
- %TEMP%\unz5191.tmp\scrptres.dll
- %TEMP%\unz5191.tmp\updatemain.mcs
- %TEMP%\unz5191.tmp\nailog.dll
- %TEMP%\unz5191.tmp\xmlwrap.dll
- %TEMP%\unz5191.tmp\componentpolicyenforcement64.dll
- %TEMP%\unz5191.tmp\componentframeworkcallback64.dll
- %TEMP%\unz5191.tmp\agentres64.dll
- %TEMP%\unz5191.tmp\agent64.dll
- %TEMP%\unz5191.tmp\epopgpsdk.dll.sig
- %TEMP%\unz5191.tmp\epopgpsdk.dll
- %TEMP%\unz5191.tmp\scriptsubsys.dll
- %TEMP%\unz5191.tmp\updres.dll
- %TEMP%\unz5191.tmp\naitcpp.inf
- %TEMP%\unz5191.tmp\naitcpp.dll
- %TEMP%\unz5191.tmp\cmalib.dll
- %TEMP%\unz5191.tmp\applib.dll
- %TEMP%\unz5191.tmp\cmauires.dll
- %TEMP%\unz5191.tmp\clientui.dll
- %TEMP%\unz5191.tmp\msvcp71.dll
- %TEMP%\unz5191.tmp\componentsubsystem.dll
- %TEMP%\unz5191.tmp\scheduler.dll
- %TEMP%\unz5191.tmp\psapi.dll
- %TEMP%\unz5191.tmp\pcrplug.dll
- %TEMP%\unz5191.tmp\cleanup.exe
- %TEMP%\unz5191.tmp\__temp.zip
- %TEMP%\unz5191.tmp\cabinet.dll
- %TEMP%\unz5191.tmp\agent.dll
- %TEMP%\unz5191.tmp\agent.ini
- %TEMP%\unz5191.tmp\agentplugin.dll
- %TEMP%\unz5191.tmp\componentsubsystem64.dll
- %TEMP%\unz5191.tmp\agentres.dll
- %TEMP%\unz5191.tmp\genevtinf.dll
- %TEMP%\unz5191.tmp\componentuserinterface.dll
- %TEMP%\unz5191.tmp\frameworklog.xsl
- %TEMP%\unz5191.tmp\frameworkmanifest.xml
- %TEMP%\unz5191.tmp\frameworkservice.exe
- %TEMP%\unz5191.tmp\frminst.exe
- %TEMP%\unz5191.tmp\cmdagent.exe
- %TEMP%\unz5191.tmp\msvcr71.dll
- %TEMP%\unz5191.tmp\internetmanager.dll
- %TEMP%\unz5191.tmp\management.dll
- %TEMP%\unz5191.tmp\listenserver.dll
- %TEMP%\unz5191.tmp\poevtinf.dll
- %TEMP%\unz5191.tmp\patchw32.dll
- %TEMP%\unz5191.tmp\naisign.dll
- %TEMP%\unz5191.tmp\naxml71.dll
- %TEMP%\unz5191.tmp\naspipe.dll
- %TEMP%\unz5191.tmp\logging.dll
- %TEMP%\unz5191.tmp\naprdmgr.exe
- %TEMP%\unz5191.tmp\frmplugin.dll
- %TEMP%\unz5191.tmp\nainet.dll
- %TEMP%\unz5191.tmp\nagshr32.dll
- %TEMP%\unz5191.tmp\nacmnlib71.dll
- %TEMP%\unz5191.tmp\mcurial.dll
- %TEMP%\unz5191.tmp\mcscript.exe
- %TEMP%\unz5191.tmp\napolicymanager.dll
- %WINDIR%\temp\unz5819.tmp\agentplugin.dll
- %WINDIR%\temp\unz5819.tmp\udaterui.exe
- %TEMP%\unz5191.tmp\management64.dll
- %WINDIR%\temp\unz5819.tmp\naxml71.dll
- %WINDIR%\temp\unz5819.tmp\naspipe.dll
- %WINDIR%\temp\unz5819.tmp\naprdmgr.exe
- %WINDIR%\temp\unz5819.tmp\napolicymanager.dll
- %WINDIR%\temp\unz5819.tmp\nailog.dll
- %WINDIR%\temp\unz5819.tmp\patchw32.dll
- %WINDIR%\temp\unz5819.tmp\nainet.dll
- %WINDIR%\temp\unz5819.tmp\nacmnlib71.dll
- %WINDIR%\temp\unz5819.tmp\mcurial.dll
- %WINDIR%\temp\unz5819.tmp\mcscript.exe
- %WINDIR%\temp\unz5819.tmp\management.dll
- %WINDIR%\temp\unz5819.tmp\logging.dll
- %WINDIR%\temp\unz5819.tmp\listenserver.dll
- %WINDIR%\temp\unz5819.tmp\nagshr32.dll
- %TEMP%\unz5191.tmp\internetmanager64.dll
- %WINDIR%\temp\unz5819.tmp\poevtinf.dll
- %WINDIR%\temp\unz5819.tmp\tchelper.dll
- %WINDIR%\temp\unz5819.tmp\tcsubsys.dll
- %WINDIR%\temp\unz5819.tmp\updatesubsys.dll
- %WINDIR%\temp\unz5819.tmp\installmain.mcs
- %WINDIR%\temp\unz5819.tmp\updatemain.mcs
- %WINDIR%\temp\unz5819.tmp\unicows.dll
- %WINDIR%\temp\unz5819.tmp\internetmanager.dll
- %WINDIR%\temp\unz5819.tmp\naisign.dll
- %WINDIR%\temp\unz5819.tmp\server.xml
- %WINDIR%\temp\unz5819.tmp\secureframeworkfactory.dll
- %WINDIR%\temp\unz5819.tmp\scrptres.dll
- %WINDIR%\temp\unz5819.tmp\scriptsubsys.dll
- %WINDIR%\temp\unz5819.tmp\scheduler.dll
- %WINDIR%\temp\unz5819.tmp\psapi.dll
- %WINDIR%\temp\unz5819.tmp\sitelist.xml
- %WINDIR%\temp\unz5819.tmp\pcrplug.dll
- %WINDIR%\temp\unz5819.tmp\genevtinf.dll
- %WINDIR%\temp\unz5819.tmp\frmplugin.dll
- %WINDIR%\temp\unz5819.tmp\frminst.exe
- %TEMP%\unz5191.tmp\nainet64.dll
- %TEMP%\unz5191.tmp\scheduler64.dll
- %TEMP%\unz5191.tmp\secureframeworkfactory64.dll
- %TEMP%\unz5191.tmp\applib64.dll
- %TEMP%\unz5191.tmp\cmalib64.dll
- %TEMP%\unz5191.tmp\genevtinf64.dll
- %TEMP%\unz5191.tmp\logging64.dll
- %TEMP%\unz5191.tmp\nacmnlib64.dll
- %TEMP%\unz5191.tmp\msvcr80.dll
- %TEMP%\unz5191.tmp\naprdmgr64.exe
- %TEMP%\unz5191.tmp\naspipe64.dll
- %TEMP%\unz5191.tmp\naxml64.dll
- %TEMP%\unz5191.tmp\nailog64.dll
- %TEMP%\unz5191.tmp\msvcm80.dll
- %TEMP%\unz5191.tmp\napolicymanager64.dll
- %WINDIR%\temp\unz5819.tmp\updplug.dll
- %TEMP%\unz5191.tmp\microsoft.vc80.crt.manifest
- %TEMP%\unz5191.tmp\mctray.exe
- %TEMP%\unz5191.tmp\mcscancheck.exe
- %WINDIR%\temp\unz5819.tmp\frameworkservice.exe
- %WINDIR%\temp\unz5819.tmp\frameworkmanifest.xml
- %WINDIR%\temp\unz5819.tmp\frameworklog.xsl
- %WINDIR%\temp\unz5819.tmp\componentuserinterface.dll
- %WINDIR%\temp\unz5819.tmp\cmdagent.exe
- %TEMP%\unz5191.tmp\jrmac.dll
- %WINDIR%\temp\unz5819.tmp\cleanup.exe
- %TEMP%\unz5191.tmp\msvcp80.dll
- %WINDIR%\temp\unz5819.tmp\agent.ini
- %WINDIR%\temp\unz5819.tmp\agent.dll
- %WINDIR%\temp\unz5819.tmp\cabinet.dll
- %WINDIR%\temp\unz5819.tmp\__temp.zip
- %TEMP%\unz5191.tmp\framepkg.exe
- %WINDIR%\temp\unz5819.tmp\agentres.dll
- mailslot\{76889c92-a0c0-46e3-a4e1-1d6a5439b8dd}00000b1c
Удаляет следующие файлы
- %PROGRAMDATA%\mcafee\common framework\precompiled.xml
Другое
Ищет следующие окна
- ClassName: 'McAfee_FrameworkServiceClass' WindowName: ''
Создает и запускает на исполнение
- '%TEMP%\unz5191.tmp\frminst.exe' /LOGDIR="%TEMP%\NAILogs" /Cleanup2="%TEMP%\unz5191.tmp" /EmbeddedUsername="" /EmbeddedDomain="" /EmbeddedPassword="" /Install=Agent
- '%TEMP%\unz5191.tmp\framepkg.exe' /SignalComplete /LOGDIR="%TEMP%\NAILogs" /Cleanup2="%TEMP%\unz5191.tmp" /WaitFor=2008 /CurrentFolder="<Текущая директория>" /Install=Agent
- '%WINDIR%\temp\unz5819.tmp\frminst.exe' /LOGDIR="%TEMP%\NAILogs" /Cleanup2="%TEMP%\unz5191.tmp" /WaitFor=2008 /CurrentFolder="<Текущая директория>" /Install=Agent /FramePkg /Cleanup="%WINDIR%\TEMP\unz5819.tmp" /LOGDIR="%TEMP%\NAILogs...
- '%ProgramFiles(x86)%\mcafee\common framework\frameworkservice.exe'
- '%ProgramFiles(x86)%\mcafee\common framework\naprdmgr.exe'
- '%ProgramFiles(x86)%\mcafee\common framework\udaterui.exe'
- '%ProgramFiles(x86)%\mcafee\common framework\naprdmgr64.exe'
- '%ProgramFiles(x86)%\mcafee\common framework\frameworkservice.exe' /ServiceStart
- '%ProgramFiles(x86)%\mcafee\common framework\naprdmgr.exe' -Embedding
- '%WINDIR%\temp\cle1521.tmp\cleanup.exe' 2008 /LOGDIR="%TEMP%\NAILogs" "%WINDIR%\TEMP\unz5819.tmp" "%TEMP%\unz5191.tmp"
- '%ProgramFiles(x86)%\mcafee\common framework\udaterui.exe' /EventName=UPDATER_UI_EVENT102db9
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq UpdaterUI.exe" /FO CSV /NH' (со скрытым окном)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq UdaterUI.exe" /FO CSV /NH' (со скрытым окном)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq naPrdMgr.exe" /FO CSV /NH' (со скрытым окном)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq McTray.exe" /FO CSV /NH' (со скрытым окном)
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq explorer.exe" /FO CSV /NH' (со скрытым окном)
Запускает на исполнение
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq UpdaterUI.exe" /FO CSV /NH
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\ComponentSubSystem.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Agent64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Agent64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\ComponentSubSystem64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\ComponentSubSystem64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\InternetManager64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\InternetManager64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Logging64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Management64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\naPolicyManager64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Management64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Scheduler64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Scheduler64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\SecureFrameworkFactory64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\SecureFrameworkFactory64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\GenEvtInf64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\GenEvtInf64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\naPolicyManager64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\UserSpace.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Logging64.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\UpdPlug.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\GenEvtInf.dll"
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq UdaterUI.exe" /FO CSV /NH
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq naPrdMgr.exe" /FO CSV /NH
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq McTray.exe" /FO CSV /NH
- '%WINDIR%\syswow64\regsvr32.exe' /u /s "%WINDIR%\SysWOW64\atl.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%WINDIR%\SysWOW64\atl.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Agent.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\AgentPlugin.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\ComponentUserInterface.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\InternetManager.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\TCSubSys.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\ListenServer.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Logging.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Management.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\naPolicyManager.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\Scheduler.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\ScriptSubSys.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\SecureFrameworkFactory.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\UpdateSubSys.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\McAfee\Common Framework\TCHelper.dll"
- '%WINDIR%\syswow64\tasklist.exe' /FI "IMAGENAME eq explorer.exe" /FO CSV /NH
