Техническая информация
- '%WINDIR%\syswow64\net.exe' stop MpsSvc
- 1.xyz
- %TEMP%\ixp000.tmp\1.xyz
- %TEMP%\ixp000.tmp\1.xy_
- %LOCALAPPDATA%\csidl_
- %LOCALAPPDATA%\csidl_x
- %LOCALAPPDATA%\csidl_
- %LOCALAPPDATA%\csidl_x
- %TEMP%\ixp000.tmp\1.xy_
- %TEMP%\ixp000.tmp\1.xyz
- %TEMP%\ixp000.tmp\1.xyz в %TEMP%\ixp000.tmp\1.xyzx
- %TEMP%\ixp000.tmp\1.xyz
- ClassName: 'Progman' WindowName: ''
- '%TEMP%\ixp000.tmp\1.xyz'
- '%WINDIR%\syswow64\cmd.exe' net stop MpsSvc' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' net stop MpsSvc
- '%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' -x -s 484
- '%WINDIR%\syswow64\net1.exe' stop MpsSvc