Техническая информация
- '%WINDIR%\syswow64\taskkill.exe' /f /im cyberGuardian.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im keepGuardian.exe
- %TEMP%\~nsua.tmp\un_a.exe
- %TEMP%\nstfa86.tmp\langdll.dll
- %WINDIR%\syswow64\msvcp110.dll
- %WINDIR%\syswow64\msvcr110.dll
- %WINDIR%\syswow64\vccorlib110.dll
- ClassName: '' WindowName: ''
- '%TEMP%\~nsua.tmp\un_a.exe' _?=<Текущая директория>\
- '%WINDIR%\syswow64\schtasks.exe' /delete /tn CGAppStart /f
- '%WINDIR%\syswow64\schtasks.exe' /delete /tn CGAppUpdate /f