Техническая информация
- <SYSTEM32>\reg.exe QUERY "HKLM\SYSTEM\CurrentControlSet\services\USBSTOR\Enum" /v "Count"
- <SYSTEM32>\cmd.exe /c ""%TEMP%\tmpfile0.bat" "
- <SYSTEM32>\find.exe /I /C "choice.exe"
- <SYSTEM32>\cmd.exe /c ""%TEMP%\tmpfile0.bat""
- <SYSTEM32>\tasklist.exe /svc /nh /fi "imagename eq choice.exe"
- %TEMP%\tmpfile0.bat
- %TEMP%\tmpfile0.bat