Техническая информация
- Средство контроля пользовательских учетных записей (UAC)
- %TEMP%\2e02.tmp\batchfile.bat
- nul
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\2E02.tmp\batchfile.bat" "
- '%WINDIR%\syswow64\reg.exe' ADD "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "0" /f
- '%WINDIR%\syswow64\reg.exe' add "HKCU\CONSOLE" /v "VirtualTerminalLevel" /t REG_DWORD /d "1" /f
- '%WINDIR%\syswow64\reg.exe' delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\SystemRestore" /v "RPSessionInterval" /f
- '%WINDIR%\syswow64\reg.exe' delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\SystemRestore" /v "DisableConfig" /f
- '%WINDIR%\syswow64\reg.exe' add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v "SystemRestorePointCreationFrequency" /t REG_DWORD /d 0 /f
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Unrestricted -NoProfile Enable-ComputerRestore -Drive 'C:\'
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' "Checkpoint-Computer -Description \"twish Opti\" -RestorePointType \"MODIFY_SETTINGS\""
- '%WINDIR%\syswow64\chcp.com' 65001