Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'Cisco AnyConnect Secure Mobility Agent for Windows' = '"%ProgramFiles(x86)%\Cisco\Cisco AnyConnect Secure Mobility Client\vpn...
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'
Создает следующие сервисы
- [<HKLM>\System\CurrentControlSet\Services\vpnagent] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\vpnagent] 'ImagePath' = '"%ProgramFiles(x86)%\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe"'
- [<HKLM>\System\CurrentControlSet\Services\acsock] 'ImagePath' = 'system32\DRIVERS\acsock64.sys'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zipsfx.000\anyconnect-win-4.8.01090-core-vpn-predeploy-k9.msi
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-processenvironment-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-processthreads-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-processthreads-l1-1-1.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-profile-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-rtlsupport-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-string-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-heap-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-synch-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-sysinfo-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-timezone-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-util-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-conio-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-convert-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-environment-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-memory-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-namedpipe-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-synch-l1-2-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-filesystem-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-interlocked-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\concrt140.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\msvcp140.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vccorlib140.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vcruntime140.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-console-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-datetime-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-debug-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-errorhandling-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-file-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-file-l1-2-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-file-l2-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-handle-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-heap-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-libraryloader-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_system.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-localization-l1-2-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\neutral.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-locale-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\acwebhelper.dll
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\vpnmanifestclient.xml
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\manifesttool.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\install\component\acsock64.json
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\install\dependency\vpn_manifest.json
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\swg_globe_disabled.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\swg_globe_enabled.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-math-l1-1-0.dll
- %PROGRAMDATA%\microsoft\windows\start menu\programs\cisco\cisco anyconnect secure mobility client\cisco anyconnect secure mobility client.lnk
- <DRIVERS>\setf313.tmp
- %WINDIR%\temp\uddf93d.tmp
- %WINDIR%\temp\uddc49.tmp
- %WINDIR%\temp\udd1a44.tmp
- %WINDIR%\temp\old1cc2.tmp
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-console-l1-2-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnmgmttun.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acwebhelper.exe
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\profile\mgmttun\anyconnectprofile.xsd
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\expand.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-multibyte-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-process-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-runtime-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-stdio-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-string-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-time-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_signals.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-utility-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_thread.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\updatecomponentmanifest.json
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\msvcp140_1.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\msvcp140_2.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-xstate-l2-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\cisco_blue.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\collapse.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\ucrtbase.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-private-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acruntime.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_filesystem.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_date_time.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_chrono.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnagentutilities.dll
- %WINDIR%\syswow64\vpncategories.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\vpnipsec.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\cues_bg.jpg
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\company_logo.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\mftogglebtn.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\mftogglebtn-down.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\ac_sock_fltr_api.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acsock64.sys
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acsock64.cat
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acsock64.inf
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_attention.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_error.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnapi.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper.exe
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\anyconnectlocalpolicy.xsd
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpncli.exe
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\update.txt
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpncommon.dll
- %TEMP%\7zipsfx.000\anyconnect.log
- %TEMP%\{a556baf7-4554-4baf-9290-bba18545890e}.bat
- %TEMP%\aibb_{c1f2a6f4-89d5-459a-b39a-ef5be4472cb9}_1212.tmp
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnagent.exe
- %WINDIR%\syswow64\vpnevents.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnui.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_good.png
- %WINDIR%\security\logs\scecomp.log
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\zlib1.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acciscossl.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpncommoncrypt.dll
- %PROGRAMDATA%\microsoft\event viewer\views\cisco\ciscoanyconnect.xml
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vacon64.exe
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\profile\anyconnectprofile.xsd
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpndownloader.exe
- %TEMP%\7zipsfx.000\vpn.mechel.com.xml
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acciscocrypto.dll
- %PROGRAMDATA%\microsoft\windows\start menu\programs\cisco\cisco anyconnect secure mobility client\~isco anyconnect secure mobility client.tmp
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_neutral.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\mftogglebtn-down-solid.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_help_hover.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_about.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_about_hover.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toast_nam.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toast_vpn.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\gui.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnva-6.cat
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnva64-6.sys
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\noncompliant.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_noncompliant.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\vpnapishim.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\acdownloader.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper64.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\app_logo.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnva-6.inf
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_prefs_hover.png
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\eula.txt
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\company_logo_alt.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\vpn_logo.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\uninstall.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\opensource.html
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_trusted.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\about_hover.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\attention.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_transition.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\error.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\about.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\transition_1.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\transition_3.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\vpn_connected.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\acfeedback.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_help.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\gradient.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_prefs.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\transition_2.ico
- %TEMP%\{f05b116c-9b77-4d98-8552-d97bd58d9d74}.bat
Удаляет следующие файлы
- %PROGRAMDATA%\microsoft\windows\start menu\programs\cisco\cisco anyconnect secure mobility client\cisco anyconnect secure mobility client.lnk~rf12ce74.tmp
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\acfeedback.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\vpn_connected.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\transition_3.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\transition_2.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_prefs.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_help.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\transition_1.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\attention.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\about_hover.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_trusted.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\opensource.html
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\uninstall.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\neutral.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\error.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\vpn_logo.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\app_logo.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\gradient.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\vpnapishim.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_noncompliant.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\noncompliant.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnva64-6.sys
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnva-6.inf
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnva-6.cat
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toast_vpn.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toast_nam.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_about_hover.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_about.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_help_hover.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\toolbar_prefs_hover.png
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\eula.txt
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\mftogglebtn-down-solid.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper64.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\company_logo_alt.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-localization-l1-2-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\about.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper.exe
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\update.txt
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpndownloader.exe
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\profile\anyconnectprofile.xsd
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vacon64.exe
- %PROGRAMDATA%\microsoft\event viewer\views\cisco\ciscoanyconnect.xml
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpncommoncrypt.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acciscossl.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acciscocrypto.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpncommon.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\zlib1.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnui.exe
- %WINDIR%\syswow64\vpnevents.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnagent.exe
- %TEMP%\7zipsfx.000\anyconnect-win-4.8.01090-core-vpn-predeploy-k9.msi
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpncli.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_chrono.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\acdownloader.dll
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\anyconnectlocalpolicy.xsd
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_neutral.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_good.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_error.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_attention.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acsock64.inf
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acsock64.cat
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acsock64.sys
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\ac_sock_fltr_api.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\mftogglebtn-down.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\mftogglebtn.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\company_logo.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\cues_bg.jpg
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\vpnipsec.dll
- %WINDIR%\syswow64\vpncategories.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnagentutilities.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\gui.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\status_ico_transition.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_date_time.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_filesystem.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_signals.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\msvcp140_2.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\msvcp140_1.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acruntime.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\updatecomponentmanifest.json
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\ucrtbase.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-utility-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-time-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-string-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-stdio-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-runtime-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-process-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-private-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-multibyte-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\collapse.ico
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\profile\mgmttun\anyconnectprofile.xsd
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-xstate-l2-1-0.dll
- %TEMP%\7zipsfx.000\anyconnect.log
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-math-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnmgmttun.exe
- %WINDIR%\temp\uddc49.tmp
- <DRIVERS>\acsock64.sys
- %WINDIR%\temp\old1cc2.tmp
- %WINDIR%\temp\udd1a44.tmp
- %PROGRAMDATA%\microsoft\windows\start menu\programs\cisco\cisco anyconnect secure mobility client\cisco anyconnect secure mobility client.lnk
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\swg_globe_enabled.png
- %WINDIR%\temp\uddf93d.tmp
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\swg_globe_disabled.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\install\component\acsock64.json
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\manifesttool.exe
- %PROGRAMDATA%\cisco\cisco anyconnect secure mobility client\vpnmanifestclient.xml
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\acwebhelper.exe
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\plugins\acwebhelper.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-console-l1-2-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\install\dependency\vpn_manifest.json
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\expand.ico
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vpnapi.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-locale-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-environment-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-handle-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-file-l2-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-file-l1-2-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-file-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-errorhandling-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-debug-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-datetime-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-console-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vcruntime140.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\vccorlib140.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\msvcp140.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\concrt140.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_thread.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\boost_system.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-heap-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-heap-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-filesystem-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-interlocked-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\res\cisco_blue.png
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-convert-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-crt-conio-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-util-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-timezone-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-sysinfo-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-synch-l1-2-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-synch-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-string-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-rtlsupport-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-profile-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-processthreads-l1-1-1.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-processthreads-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-processenvironment-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-namedpipe-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-memory-l1-1-0.dll
- %ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\api-ms-win-core-libraryloader-l1-1-0.dll
- %TEMP%\7zipsfx.000\vpn.mechel.com.xml
Перемещает следующие файлы
- %PROGRAMDATA%\microsoft\windows\start menu\programs\cisco\cisco anyconnect secure mobility client\cisco anyconnect secure mobility client.lnk в %PROGRAMDATA%\microsoft\windows\start menu\programs\cisco\cisco anyconnect secure mobility client\cisco anyconnect secure mobility client.lnk~rf12ce74.tmp
- <DRIVERS>\setf313.tmp в <DRIVERS>\acsock64.sys
Подменяет следующие файлы
- %PROGRAMDATA%\microsoft\windows\start menu\programs\cisco\cisco anyconnect secure mobility client\cisco anyconnect secure mobility client.lnk
Другое
Создает и запускает на исполнение
- '%ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper.exe' -moveIfExist "%PROGRAMDATA%\\Cisco\Cisco AnyConnect VPN Client\preferences_global.xml" "%PROGRAMDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\\preferences_global.xml"
- '%ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper.exe' -moveIfExist "%LOCALAPPDATA%\\Cisco\Cisco AnyConnect VPN Client\preferences.xml" "%LOCALAPPDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\\preferences.xml"
- '%ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper.exe' -moveFiles "%PROGRAMDATA%\\Cisco\Cisco AnyConnect VPN Client\Profile\\" "%PROGRAMDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\\Profile\\" "*.xml"
- '%ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper.exe' -moveFiles "%PROGRAMDATA%\\Cisco\Cisco AnyConnect VPN Client\Script\\" "%PROGRAMDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\\Script\\" "*.*"
- '%ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper.exe' -moveFiles "%PROGRAMDATA%\\Cisco\Cisco AnyConnect VPN Client\l10n\\" "%PROGRAMDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\\l10n\\" "*.*"
- '%ProgramFiles(x86)%\cisco\cisco anyconnect secure mobility client\installhelper.exe' -registerdll "%ProgramFiles(x86)%\Cisco\Cisco AnyConnect Secure Mobility Client\vpnapi.dll"
- '%WINDIR%\syswow64\cmd.exe' /c copy "vpn.mechel.com.xml" "%PROGRAMDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile" /Y' (со скрытым окном)
Запускает на исполнение
- '%WINDIR%\syswow64\msiexec.exe' /package anyconnect-win-4.8.01090-core-vpn-predeploy-k9.msi /passive /lvx anyconnect.log
- '%WINDIR%\syswow64\cmd.exe' "%TEMP%\{A556BAF7-4554-4BAF-9290-BBA18545890E}.bat"
- '%WINDIR%\syswow64\chcp.com' 65001
- '<SYSTEM32>\runonce.exe' -r
- '<SYSTEM32>\grpconv.exe' -o
- '%WINDIR%\syswow64\cmd.exe' "%TEMP%\{F05B116C-9B77-4D98-8552-D97BD58D9D74}.bat"
- '%WINDIR%\syswow64\cmd.exe' /c copy "vpn.mechel.com.xml" "%PROGRAMDATA%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile" /Y
