Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKLM>\Software\Classes\UltraViewerRecord\Shell\Open\Command] '' = '%ProgramFiles(x86)%\UltraViewer\UltraViewer_Desktop "%1"'
Устанавливает следующие настройки сервисов
- [<HKLM>\System\CurrentControlSet\Services\UltraViewService] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\UltraViewService] 'ImagePath' = '"%ProgramFiles(x86)%\UltraViewer\UltraViewer_Service.exe"'
Создает следующие сервисы
- 'UltraViewService' "%ProgramFiles(x86)%\UltraViewer\UltraViewer_Service.exe"
- 'UltraViewService' %ProgramFiles(x86)%\UltraViewer\UltraViewer_Service.exe
Вредоносные функции
Запускает на исполнение
- '%WINDIR%\syswow64\net.exe' stop UltraViewService
- '%WINDIR%\syswow64\taskkill.exe' /f /im "UltraViewer_Desktop.exe"
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zipsfx.000\ultraviewer_setup_6.2_en.exe
- %ProgramFiles(x86)%\ultraviewer\language\is-i8b1n.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-v4dvd.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-61hfd.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-7ptur.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-kfph6.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-n4mua.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-gc8uv.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-r0l2i.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-n14cu.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-ctkif.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-31d8f.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-o17ar.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-3gkj6.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-5g1cm.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-e3db2.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-lnu2v.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-7en67.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-gh42n.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-86gs2.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-qkha6.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-ghvfl.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-jbfv0.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-kledn.tmp
- C:\users\public\desktop\ultraviewer.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\ultraviewer\ultraviewer.lnk
- %ProgramFiles(x86)%\ultraviewer\htmlagilitypack.tlb
- %ProgramFiles(x86)%\ultraviewer\remotecontrol40.tlb
- %ProgramFiles(x86)%\ultraviewer\language.ini
- %ProgramFiles(x86)%\ultraviewer\is-odo1i.tmp
- %ProgramFiles(x86)%\ultraviewer\is-er1tv.tmp
- %ProgramFiles(x86)%\ultraviewer\update\is-lhrg3.tmp
- %ProgramFiles(x86)%\ultraviewer\sounds\is-qhdv6.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-f4qde.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-ksevb.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-8t1sv.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-535oo.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-lokac.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-qq90u.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-fj3jg.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-21nal.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-u682h.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-cqrnv.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-lp7nt.tmp
- %ProgramFiles(x86)%\ultraviewer\language\is-pu8s5.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-e8fc8.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-knale.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-m96it.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-k308m.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-8i1jm.tmp
- %ProgramFiles(x86)%\ultraviewer\is-tmn6f.tmp
- %ProgramFiles(x86)%\ultraviewer\is-1hh44.tmp
- %ProgramFiles(x86)%\ultraviewer\is-frjgj.tmp
- %ProgramFiles(x86)%\ultraviewer\is-icev4.tmp
- %ProgramFiles(x86)%\ultraviewer\is-u351s.tmp
- %ProgramFiles(x86)%\ultraviewer\is-79mms.tmp
- %ProgramFiles(x86)%\ultraviewer\is-vvh1o.tmp
- %ProgramFiles(x86)%\ultraviewer\is-ko9ti.tmp
- %ProgramFiles(x86)%\ultraviewer\is-0eaq6.tmp
- %ProgramFiles(x86)%\ultraviewer\is-6g9ri.tmp
- %ProgramFiles(x86)%\ultraviewer\is-2jj9g.tmp
- %ProgramFiles(x86)%\ultraviewer\is-hp3vv.tmp
- %ProgramFiles(x86)%\ultraviewer\is-hvi55.tmp
- %ProgramFiles(x86)%\ultraviewer\is-53iqb.tmp
- %ProgramFiles(x86)%\ultraviewer\is-u6iq1.tmp
- %ProgramFiles(x86)%\ultraviewer\is-sq5l7.tmp
- %ProgramFiles(x86)%\ultraviewer\is-4ei03.tmp
- %TEMP%\is-7tqvh.tmp\isxdl.dll
- %TEMP%\is-7tqvh.tmp\idp.dll
- %TEMP%\is-7tqvh.tmp\_isetup\_setup64.tmp
- %TEMP%\is-ebs0j.tmp\ultraviewer_setup_6.2_en.tmp
- %ProgramFiles(x86)%\ultraviewer\unins000.dat
- %ProgramFiles(x86)%\ultraviewer\language\is-tj248.tmp
- %ProgramFiles(x86)%\ultraviewer\is-c1ubo.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-e0klq.tmp
- %ProgramFiles(x86)%\ultraviewer\is-omfj2.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-cp8fi.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-ou9ii.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-bnjl7.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-uji6q.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-at7uc.tmp
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-o5pau.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-4oi9t.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-nm2uo.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-vkvav.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-7unp8.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-r1kiv.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-k7aao.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-s9ubi.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-gp6ep.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-3h60l.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-5hfe3.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-b44qe.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-jqggo.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-vs778.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-pc400.tmp
- %ProgramFiles(x86)%\ultraviewer\images\is-lekoe.tmp
- %ProgramFiles(x86)%\ultraviewer\ultraviewerservice_log.txt
Удаляет следующие файлы
- %ProgramFiles(x86)%\ultraviewer\msvbvm60.dll
- %ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe
- %TEMP%\is-7tqvh.tmp\idp.dll
- %TEMP%\is-7tqvh.tmp\isxdl.dll
- %TEMP%\is-7tqvh.tmp\_isetup\_setup64.tmp
- %TEMP%\is-ebs0j.tmp\ultraviewer_setup_6.2_en.tmp
- %TEMP%\7zipsfx.000\ultraviewer_setup_6.2_en.exe
Перемещает следующие файлы
- %ProgramFiles(x86)%\ultraviewer\is-4ei03.tmp в %ProgramFiles(x86)%\ultraviewer\unins000.exe
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-kfph6.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\wink.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-n4mua.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\unsure.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-gc8uv.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\tongue-out.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-r0l2i.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\thumb-up.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-n14cu.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\surprised.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-ghvfl.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\sunglasses.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-knale.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\squint.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-o17ar.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\smile.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-3gkj6.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\shark.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-5g1cm.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\robot.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-e3db2.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\poop.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-lnu2v.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\penguin.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-7en67.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\pacman.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-gh42n.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\kiss.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-86gs2.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\kiki.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-qkha6.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\heart.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-e8fc8.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\grumpy.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-k308m.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\frown.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-m96it.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\glasses.png
- %ProgramFiles(x86)%\ultraviewer\language\is-7ptur.tmp в %ProgramFiles(x86)%\ultraviewer\language\catalan.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-61hfd.tmp в %ProgramFiles(x86)%\ultraviewer\language\english.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-f4qde.tmp в %ProgramFiles(x86)%\ultraviewer\language\vietnamese.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-ksevb.tmp в %ProgramFiles(x86)%\ultraviewer\language\thai.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-8t1sv.tmp в %ProgramFiles(x86)%\ultraviewer\language\tchinese.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-535oo.tmp в %ProgramFiles(x86)%\ultraviewer\language\srpski.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-lokac.tmp в %ProgramFiles(x86)%\ultraviewer\language\spanish.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-qq90u.tmp в %ProgramFiles(x86)%\ultraviewer\language\schinese.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-fj3jg.tmp в %ProgramFiles(x86)%\ultraviewer\language\russian.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-21nal.tmp в %ProgramFiles(x86)%\ultraviewer\language\romanian.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-cqrnv.tmp в %ProgramFiles(x86)%\ultraviewer\language\polish.txt
- %ProgramFiles(x86)%\ultraviewer\images\is-k7aao.tmp в %ProgramFiles(x86)%\ultraviewer\images\minimize_icon.png
- %ProgramFiles(x86)%\ultraviewer\language\is-lp7nt.tmp в %ProgramFiles(x86)%\ultraviewer\language\languagelist.ini
- %ProgramFiles(x86)%\ultraviewer\language\is-pu8s5.tmp в %ProgramFiles(x86)%\ultraviewer\language\korean.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-tj248.tmp в %ProgramFiles(x86)%\ultraviewer\language\japanese.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-kledn.tmp в %ProgramFiles(x86)%\ultraviewer\language\italiano.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-ctkif.tmp в %ProgramFiles(x86)%\ultraviewer\language\indonesia.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-31d8f.tmp в %ProgramFiles(x86)%\ultraviewer\language\greek.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-i8b1n.tmp в %ProgramFiles(x86)%\ultraviewer\language\german.txt
- %ProgramFiles(x86)%\ultraviewer\language\is-v4dvd.tmp в %ProgramFiles(x86)%\ultraviewer\language\french.txt
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-8i1jm.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\devil.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-cp8fi.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\curly-lips.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-ou9ii.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\crying.png
- %ProgramFiles(x86)%\ultraviewer\is-omfj2.tmp в %ProgramFiles(x86)%\ultraviewer\uv_clib.dll
- %ProgramFiles(x86)%\ultraviewer\is-1hh44.tmp в %ProgramFiles(x86)%\ultraviewer\uvuninstall.exe
- %ProgramFiles(x86)%\ultraviewer\is-frjgj.tmp в %ProgramFiles(x86)%\ultraviewer\uvh64.dll
- %ProgramFiles(x86)%\ultraviewer\is-icev4.tmp в %ProgramFiles(x86)%\ultraviewer\uvh.dll
- %ProgramFiles(x86)%\ultraviewer\is-u351s.tmp в %ProgramFiles(x86)%\ultraviewer\uvc.dll
- %ProgramFiles(x86)%\ultraviewer\is-79mms.tmp в %ProgramFiles(x86)%\ultraviewer\ultraviewer_service.exe.config
- %ProgramFiles(x86)%\ultraviewer\is-vvh1o.tmp в %ProgramFiles(x86)%\ultraviewer\ultraviewer_service.exe
- %ProgramFiles(x86)%\ultraviewer\is-ko9ti.tmp в %ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe.config
- %ProgramFiles(x86)%\ultraviewer\is-0eaq6.tmp в %ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe
- %ProgramFiles(x86)%\ultraviewer\is-6g9ri.tmp в %ProgramFiles(x86)%\ultraviewer\remotecontrol40.dll
- %ProgramFiles(x86)%\ultraviewer\is-tmn6f.tmp в %ProgramFiles(x86)%\ultraviewer\remotecontrol.dll
- %ProgramFiles(x86)%\ultraviewer\is-2jj9g.tmp в %ProgramFiles(x86)%\ultraviewer\msvbvm60.dll
- %ProgramFiles(x86)%\ultraviewer\is-hvi55.tmp в %ProgramFiles(x86)%\ultraviewer\htmlagilitypack.dll
- %ProgramFiles(x86)%\ultraviewer\is-53iqb.tmp в %ProgramFiles(x86)%\ultraviewer\emotion.fan
- %ProgramFiles(x86)%\ultraviewer\is-u6iq1.tmp в %ProgramFiles(x86)%\ultraviewer\copyrights.txt
- %ProgramFiles(x86)%\ultraviewer\is-sq5l7.tmp в %ProgramFiles(x86)%\ultraviewer\8bit.dat
- %ProgramFiles(x86)%\ultraviewer\is-c1ubo.tmp в %ProgramFiles(x86)%\ultraviewer\uv_x64.exe.config
- %ProgramFiles(x86)%\ultraviewer\images\is-jbfv0.tmp в %ProgramFiles(x86)%\ultraviewer\images\checkbox-checked.png
- %ProgramFiles(x86)%\ultraviewer\is-hp3vv.tmp в %ProgramFiles(x86)%\ultraviewer\uv_x64.exe
- %ProgramFiles(x86)%\ultraviewer\images\is-lekoe.tmp в %ProgramFiles(x86)%\ultraviewer\images\checkbox-empty.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-bnjl7.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\confused.png
- %ProgramFiles(x86)%\ultraviewer\images\is-e0klq.tmp в %ProgramFiles(x86)%\ultraviewer\images\close-icon.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-uji6q.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\big-smile.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-at7uc.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\angry.png
- %ProgramFiles(x86)%\ultraviewer\images\emotions\is-o5pau.tmp в %ProgramFiles(x86)%\ultraviewer\images\emotions\angel.png
- %ProgramFiles(x86)%\ultraviewer\images\is-4oi9t.tmp в %ProgramFiles(x86)%\ultraviewer\images\restore_icon.png
- %ProgramFiles(x86)%\ultraviewer\images\is-nm2uo.tmp в %ProgramFiles(x86)%\ultraviewer\images\reload-icon.png
- %ProgramFiles(x86)%\ultraviewer\images\is-vkvav.tmp в %ProgramFiles(x86)%\ultraviewer\images\red-close-icon.png
- %ProgramFiles(x86)%\ultraviewer\images\is-7unp8.tmp в %ProgramFiles(x86)%\ultraviewer\images\online.png
- %ProgramFiles(x86)%\ultraviewer\language\is-u682h.tmp в %ProgramFiles(x86)%\ultraviewer\language\portuguese.txt
- %ProgramFiles(x86)%\ultraviewer\sounds\is-qhdv6.tmp в %ProgramFiles(x86)%\ultraviewer\sounds\notify.wav
- %ProgramFiles(x86)%\ultraviewer\images\is-s9ubi.tmp в %ProgramFiles(x86)%\ultraviewer\images\loading.gif
- %ProgramFiles(x86)%\ultraviewer\images\is-gp6ep.tmp в %ProgramFiles(x86)%\ultraviewer\images\computer-online.png
- %ProgramFiles(x86)%\ultraviewer\images\is-3h60l.tmp в %ProgramFiles(x86)%\ultraviewer\images\computer-online-checked.png
- %ProgramFiles(x86)%\ultraviewer\images\is-5hfe3.tmp в %ProgramFiles(x86)%\ultraviewer\images\computer-offline.png
- %ProgramFiles(x86)%\ultraviewer\images\is-b44qe.tmp в %ProgramFiles(x86)%\ultraviewer\images\computer-offline-checked.png
- %ProgramFiles(x86)%\ultraviewer\images\is-jqggo.tmp в %ProgramFiles(x86)%\ultraviewer\images\computer-icon.png
- %ProgramFiles(x86)%\ultraviewer\images\is-vs778.tmp в %ProgramFiles(x86)%\ultraviewer\images\comment_dots.png
- %ProgramFiles(x86)%\ultraviewer\images\is-pc400.tmp в %ProgramFiles(x86)%\ultraviewer\images\collapse.png
- %ProgramFiles(x86)%\ultraviewer\images\is-r1kiv.tmp в %ProgramFiles(x86)%\ultraviewer\images\offline.png
- %ProgramFiles(x86)%\ultraviewer\update\is-lhrg3.tmp в %ProgramFiles(x86)%\ultraviewer\update\uvupdater.exe.config
Подменяет следующие файлы
- %ProgramFiles(x86)%\ultraviewer\msvbvm60.dll
- %ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe
Другое
Ищет следующие окна
- ClassName: '' WindowName: ''
- ClassName: '$$$UI0Background' WindowName: ''
Создает и запускает на исполнение
- '%TEMP%\7zipsfx.000\ultraviewer_setup_6.2_en.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%TEMP%\is-ebs0j.tmp\ultraviewer_setup_6.2_en.tmp' /SL5="$C0210,2461056,121344,%TEMP%\7ZipSfx.000\UltraViewer_setup_6.2_en.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe' validate
- '%ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe' install
- '%ProgramFiles(x86)%\ultraviewer\ultraviewer_service.exe'
- '%ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe' regasm40
- '%WINDIR%\syswow64\net.exe' stop UltraViewService' (со скрытым окном)
- '%WINDIR%\syswow64\sc.exe' delete UltraViewService' (со скрытым окном)
- '%WINDIR%\syswow64\taskkill.exe' /f /im "UltraViewer_Desktop.exe"' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe' "%ProgramFiles(x86)%\UltraViewer\RemoteControl40.dll" /tlb' (со скрытым окном)
- '%ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe' validate' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe' "%ProgramFiles(x86)%\UltraViewer\HtmlAgilityPack.dll" /tlb' (со скрытым окном)
- '%ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe' install' (со скрытым окном)
- '%WINDIR%\syswow64\sc.exe' failure "UltraViewService" reset= 0 actions= restart/60000' (со скрытым окном)
- '%ProgramFiles(x86)%\ultraviewer\ultraviewer_desktop.exe' regasm40' (со скрытым окном)
Запускает на исполнение
- '%WINDIR%\syswow64\net1.exe' stop UltraViewService
- '%WINDIR%\syswow64\sc.exe' delete UltraViewService
- '%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe' "%ProgramFiles(x86)%\UltraViewer\RemoteControl40.dll" /tlb
- '%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe' "%ProgramFiles(x86)%\UltraViewer\HtmlAgilityPack.dll" /tlb
- '%WINDIR%\syswow64\sc.exe' failure "UltraViewService" reset= 0 actions= restart/60000
- '%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe' "%ProgramFiles(x86)%\UltraViewer\RemoteControl40.dll" /tlb /codebase
- '<SYSTEM32>\ui0detect.exe'
