Техническая информация
- <SYSTEM32>\netsh.exe advfirewall firewall add rule name="Remonts Windows" dir=in program="%WINDIR%\appstade\rutserv.exe" security=notrequired action=allow
- <SYSTEM32>\net1.exe stop RManService
- <SYSTEM32>\attrib.exe +a +s +r +h %WINDIR%\appstade
- <SYSTEM32>\reg.exe import "%WINDIR%\key.reg
- <SYSTEM32>\net.exe stop RManService
- <SYSTEM32>\reg.exe delete "HKEY_LOCAL_MACHINE\SYSTEM\Remote Manipulator System" /f
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\wasf.bat" "
- <SYSTEM32>\taskkill.exe /f /im rfusclient.exe /t
- <SYSTEM32>\taskkill.exe /f /im rutserv.exe /t
- %TEMP%\1.bat
- %TEMP%\1.tmp\wasf.bat
- ClassName: '' WindowName: ''