Trojan.Siggen31.36792

Техническая информация

Для обеспечения автозапуска и распространения

Модифицирует следующие ключи реестра

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcEventSync.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcQMod.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ADPClientService.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdpSDKUtil.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdskAccessCore.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdskAccessService.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdskAccessServiceHost.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdskIdentityManager.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Autodesk Access UI Host.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdskAccessDialogUtility.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdskUpdateCheck.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdskInstallerUpdateCheck.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LogAnalyzer.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ProcessManager.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DownloadManager.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install_helper_tool.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install_manager.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdSSO.exe] 'Debugger' = 'Blocked'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GenuineService.exe] 'Debugger' = 'Blocked'

Вредоносные функции

Запускает на исполнение

'<SYSTEM32>\net.exe' stop AdskLicensingService
'<SYSTEM32>\taskkill.exe' /F /IM "AdskLicensingService.exe"
'<SYSTEM32>\taskkill.exe' /F /IM "AdskLicensingAgent.exe"
'<SYSTEM32>\taskkill.exe' /F /IM "ADPClientService.exe"
'<SYSTEM32>\taskkill.exe' /F /IM "AdskLicensingAnalyticsClient.exe"
'<SYSTEM32>\taskkill.exe' /F /IM "AdskLicensingInstHelper.exe"
'<SYSTEM32>\taskkill.exe' /F /IM "lmgrd.exe"
'<SYSTEM32>\taskkill.exe' /F /IM "adskflex.exe"
'<SYSTEM32>\taskkill.exe' /F /IM "lmutil.exe"
'<SYSTEM32>\taskkill.exe' /F /IM "lmtools.exe"
'<SYSTEM32>\netsh.exe' advfirewall firewall add rule name="AutodeskNLM" dir=in action=block profile=any program="%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\adskflex.exe"
'<SYSTEM32>\netsh.exe' advfirewall firewall add rule name="AutodeskNLM" dir=in action=block profile=any program="%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\lmgrd.exe"
'<SYSTEM32>\netsh.exe' advfirewall firewall add rule name="AutodeskNLM" dir=out action=block profile=any program="%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\adskflex.exe"
'<SYSTEM32>\netsh.exe' advfirewall firewall add rule name="AutodeskNLM" dir=out action=block profile=any program="%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\lmgrd.exe"
'%WINDIR%\syswow64\net.exe' stop AdskLicensingService
'%WINDIR%\syswow64\taskkill.exe' /F /IM "AdskLicensingService.exe"
'%WINDIR%\syswow64\taskkill.exe' /F /IM "AdskLicensingAgent.exe"
'%WINDIR%\syswow64\taskkill.exe' /F /IM "ADPClientService.exe"
'%WINDIR%\syswow64\taskkill.exe' /F /IM "AdskLicensingAnalyticsClient.exe"

Изменения в файловой системе

Создает следующие файлы

%TEMP%\rarsfx0\files\networklicensemanager\adskflex.exe
%TEMP%\rarsfx0\files\networklicensemanager\license.lic
%TEMP%\rarsfx0\files\networklicensemanager\lmgrd.exe
%TEMP%\rarsfx0\files\networklicensemanager\lmtools.exe
%TEMP%\rarsfx0\files\patchedfiles\netapi32.dll
%TEMP%\rarsfx0\files\patchedfiles\version.dll
%TEMP%\rarsfx0\files\service\service.bat
%TEMP%\rarsfx0\files\service\service.exe
%TEMP%\rarsfx0\files\task\autodesk.xml
%TEMP%\rarsfx0\files\tweak\tweak.reg
%TEMP%\rarsfx0\files\tweak\unnamed.json
%TEMP%\rarsfx0\autodesklicensepatcherinstaller.bat
nul
%WINDIR%\temp\cab6eac.tmp
%WINDIR%\temp\tar6ead.tmp
%WINDIR%\temp\cabae5c.tmp
%WINDIR%\temp\tarae5d.tmp
%WINDIR%\temp\cabae7e.tmp
%WINDIR%\temp\tarae7f.tmp
%WINDIR%\temp\cabaeae.tmp
%WINDIR%\temp\taraeaf.tmp
%WINDIR%\temp\cabaed0.tmp
%WINDIR%\temp\taraed1.tmp
%WINDIR%\temp\cabb067.tmp
%WINDIR%\temp\tarb068.tmp
%WINDIR%\temp\cabb098.tmp
%WINDIR%\temp\tarb099.tmp
%WINDIR%\temp\cabb194.tmp
%WINDIR%\temp\tarb195.tmp
%WINDIR%\temp\cabb1b5.tmp
%WINDIR%\temp\tarb1b6.tmp
%WINDIR%\temp\cabb2b0.tmp
%WINDIR%\temp\tarb2b1.tmp
%WINDIR%\temp\cabb2e1.tmp
%WINDIR%\temp\tarb2e2.tmp
%WINDIR%\temp\cabb3dd.tmp
%WINDIR%\temp\tarb3ed.tmp
%WINDIR%\temp\cabb40e.tmp
%WINDIR%\temp\tarb40f.tmp
%WINDIR%\temp\cabb519.tmp
%WINDIR%\temp\tarb51a.tmp
%WINDIR%\temp\cabb54a.tmp
%WINDIR%\temp\tarb54b.tmp
%WINDIR%\temp\cabb838.tmp
%WINDIR%\temp\tarb839.tmp
%WINDIR%\temp\cabcc95.tmp
%WINDIR%\temp\tarcc96.tmp
%WINDIR%\temp\cabccb6.tmp
%WINDIR%\temp\tarccb7.tmp
%WINDIR%\temp\cabcd06.tmp
%WINDIR%\temp\tarcd07.tmp
%WINDIR%\temp\cabcdc3.tmp
%WINDIR%\temp\tarcdc4.tmp
%WINDIR%\temp\cabcf99.tmp
%WINDIR%\temp\tarcf9a.tmp
%WINDIR%\temp\cabcfda.tmp
%WINDIR%\temp\tarcfdb.tmp
%WINDIR%\temp\cabd1ee.tmp
%WINDIR%\temp\tard1ef.tmp
%WINDIR%\temp\cabd395.tmp
%WINDIR%\temp\tard396.tmp
%WINDIR%\temp\cabd9a0.tmp
%WINDIR%\temp\tard9a1.tmp
%WINDIR%\temp\cabdc02.tmp
%WINDIR%\temp\tardc03.tmp
%WINDIR%\temp\cabdfeb.tmp
%WINDIR%\temp\tardfec.tmp
%WINDIR%\temp\cabe03b.tmp
%WINDIR%\temp\tare03c.tmp
%WINDIR%\temp\cabe1d2.tmp
%WINDIR%\temp\tare1d3.tmp
%WINDIR%\temp\cabe222.tmp
%WINDIR%\temp\tare223.tmp
%WINDIR%\temp\cabe7b0.tmp
%WINDIR%\temp\tare7c0.tmp
%WINDIR%\temp\cabef31.tmp
%WINDIR%\temp\taref32.tmp
%WINDIR%\temp\cabef71.tmp
%WINDIR%\temp\taref72.tmp
%WINDIR%\temp\cabefb1.tmp
%WINDIR%\temp\tarefb2.tmp
%WINDIR%\temp\cabf021.tmp
%WINDIR%\temp\tarf022.tmp
%WINDIR%\temp\cabf293.tmp
%WINDIR%\temp\tarf294.tmp
%WINDIR%\temp\cabf2f2.tmp
%WINDIR%\temp\tarf2f3.tmp
%WINDIR%\temp\cabf499.tmp
%WINDIR%\temp\tarf49a.tmp
%WINDIR%\temp\cabf4ca.tmp
%WINDIR%\temp\tarf4cb.tmp
%WINDIR%\temp\cabf6a0.tmp
%WINDIR%\temp\tarf6a1.tmp
%WINDIR%\temp\cabf6e1.tmp
%WINDIR%\temp\tarf6e2.tmp
%WINDIR%\temp\cabf8e5.tmp
%WINDIR%\temp\tarf8e6.tmp
%WINDIR%\temp\cabf983.tmp
%WINDIR%\temp\tarf984.tmp
%WINDIR%\temp\cabfcd0.tmp
%WINDIR%\temp\tarfcd1.tmp
%WINDIR%\temp\cabfddb.tmp
%WINDIR%\temp\tarfddc.tmp
%WINDIR%\temp\cab5d.tmp
%WINDIR%\temp\tar6d.tmp
%WINDIR%\temp\cab261.tmp
%WINDIR%\temp\tar262.tmp
%WINDIR%\temp\cab2a2.tmp
%WINDIR%\temp\tar2a3.tmp
%WINDIR%\temp\cab330.tmp
%WINDIR%\temp\tar341.tmp
%WINDIR%\temp\cab46a.tmp
%WINDIR%\temp\tar46b.tmp
%WINDIR%\temp\cab9d9.tmp
%WINDIR%\temp\tar9da.tmp
%WINDIR%\temp\caba48.tmp
%WINDIR%\temp\tara49.tmp
%WINDIR%\temp\cabbb1.tmp
%WINDIR%\temp\tarbb2.tmp
%WINDIR%\temp\cabc2f.tmp
%WINDIR%\temp\tarc30.tmp
%WINDIR%\temp\cabdc7.tmp
%WINDIR%\temp\tardc8.tmp
%WINDIR%\temp\cabe75.tmp
%WINDIR%\temp\tare76.tmp
%WINDIR%\temp\cabf8f.tmp
%WINDIR%\temp\tarf90.tmp
%WINDIR%\temp\cabfdf.tmp
%WINDIR%\temp\tarfe0.tmp
%WINDIR%\temp\cab1251.tmp
%WINDIR%\temp\tar1252.tmp
%WINDIR%\temp\cab134d.tmp
%WINDIR%\temp\tar134e.tmp
%WINDIR%\temp\cab1a32.tmp
%WINDIR%\temp\tar1a33.tmp
%CommonProgramFiles(x86)%\autodesk shared\network license manager\adskflex.exe
%CommonProgramFiles(x86)%\autodesk shared\network license manager\lmgrd.exe
%CommonProgramFiles(x86)%\autodesk shared\network license manager\license.lic
%CommonProgramFiles(x86)%\autodesk shared\network license manager\service.exe
%CommonProgramFiles(x86)%\autodesk shared\adsklicensing\current\adsklicensingagent\version.dll
%CommonProgramFiles(x86)%\autodesk shared\adsklicensing\current\adsklicensingagent\netapi32.dll
%CommonProgramFiles(x86)%\autodesk shared\adlm\r28\netapi32.dll
%APPDATA%\autodesk\adpsdk\userconsent\unnamed.json

Удаляет следующие файлы

%WINDIR%\temp\cab6eac.tmp
%WINDIR%\temp\tar6ead.tmp
%WINDIR%\temp\cabae5c.tmp
%WINDIR%\temp\tarae5d.tmp
%WINDIR%\temp\cabae7e.tmp
%WINDIR%\temp\tarae7f.tmp
%WINDIR%\temp\cabaeae.tmp
%WINDIR%\temp\taraeaf.tmp
%WINDIR%\temp\cabaed0.tmp
%WINDIR%\temp\taraed1.tmp
%WINDIR%\temp\cabb067.tmp
%WINDIR%\temp\tarb068.tmp
%WINDIR%\temp\cabb098.tmp
%WINDIR%\temp\tarb099.tmp
%WINDIR%\temp\cabb194.tmp
%WINDIR%\temp\tarb195.tmp
%WINDIR%\temp\cabb1b5.tmp
%WINDIR%\temp\tarb1b6.tmp
%WINDIR%\temp\cabb2b0.tmp
%WINDIR%\temp\tarb2b1.tmp
%WINDIR%\temp\cabb2e1.tmp
%WINDIR%\temp\tarb2e2.tmp
%WINDIR%\temp\cabb3dd.tmp
%WINDIR%\temp\tarb3ed.tmp
%WINDIR%\temp\cabb40e.tmp
%WINDIR%\temp\tarb40f.tmp
%WINDIR%\temp\cabb519.tmp
%WINDIR%\temp\tarb51a.tmp
%WINDIR%\temp\cabb54a.tmp
%WINDIR%\temp\tarb54b.tmp
%WINDIR%\temp\cabb838.tmp
%WINDIR%\temp\tarb839.tmp
%WINDIR%\temp\cabcc95.tmp
%WINDIR%\temp\tarcc96.tmp
%WINDIR%\temp\cabccb6.tmp
%WINDIR%\temp\tarccb7.tmp
%WINDIR%\temp\cabcd06.tmp
%WINDIR%\temp\tarcd07.tmp
%WINDIR%\temp\cabcdc3.tmp
%WINDIR%\temp\tarcdc4.tmp
%WINDIR%\temp\cabcf99.tmp
%WINDIR%\temp\tarcf9a.tmp
%WINDIR%\temp\cabcfda.tmp
%WINDIR%\temp\tarcfdb.tmp
%WINDIR%\temp\cabd1ee.tmp
%WINDIR%\temp\tard1ef.tmp
%WINDIR%\temp\cabd395.tmp
%WINDIR%\temp\tard396.tmp
%WINDIR%\temp\cabd9a0.tmp
%WINDIR%\temp\tard9a1.tmp
%WINDIR%\temp\cabdc02.tmp
%WINDIR%\temp\tardc03.tmp
%WINDIR%\temp\cabdfeb.tmp
%WINDIR%\temp\tardfec.tmp
%WINDIR%\temp\cabe03b.tmp
%WINDIR%\temp\tare03c.tmp
%WINDIR%\temp\cabe1d2.tmp
%WINDIR%\temp\tare1d3.tmp
%WINDIR%\temp\cabe222.tmp
%WINDIR%\temp\tare223.tmp
%WINDIR%\temp\cabe7b0.tmp
%WINDIR%\temp\tare7c0.tmp
%WINDIR%\temp\cabef31.tmp
%WINDIR%\temp\taref32.tmp
%WINDIR%\temp\cabef71.tmp
%WINDIR%\temp\taref72.tmp
%WINDIR%\temp\cabefb1.tmp
%WINDIR%\temp\tarefb2.tmp
%WINDIR%\temp\cabf021.tmp
%WINDIR%\temp\tarf022.tmp
%WINDIR%\temp\cabf293.tmp
%WINDIR%\temp\tarf294.tmp
%WINDIR%\temp\cabf2f2.tmp
%WINDIR%\temp\tarf2f3.tmp
%WINDIR%\temp\cabf499.tmp
%WINDIR%\temp\tarf49a.tmp
%WINDIR%\temp\cabf4ca.tmp
%WINDIR%\temp\tarf4cb.tmp
%WINDIR%\temp\cabf6a0.tmp
%WINDIR%\temp\tarf6a1.tmp
%WINDIR%\temp\cabf6e1.tmp
%WINDIR%\temp\tarf6e2.tmp
%WINDIR%\temp\cabf8e5.tmp
%WINDIR%\temp\tarf8e6.tmp
%WINDIR%\temp\cabf983.tmp
%WINDIR%\temp\tarf984.tmp
%WINDIR%\temp\cabfcd0.tmp
%WINDIR%\temp\tarfcd1.tmp
%WINDIR%\temp\cabfddb.tmp
%WINDIR%\temp\tarfddc.tmp
%WINDIR%\temp\cab5d.tmp
%WINDIR%\temp\tar6d.tmp
%WINDIR%\temp\cab261.tmp
%WINDIR%\temp\tar262.tmp
%WINDIR%\temp\cab2a2.tmp
%WINDIR%\temp\tar2a3.tmp
%WINDIR%\temp\cab330.tmp
%WINDIR%\temp\tar341.tmp
%WINDIR%\temp\cab46a.tmp
%WINDIR%\temp\tar46b.tmp
%WINDIR%\temp\cab9d9.tmp
%WINDIR%\temp\tar9da.tmp
%WINDIR%\temp\caba48.tmp
%WINDIR%\temp\tara49.tmp
%WINDIR%\temp\cabbb1.tmp
%WINDIR%\temp\tarbb2.tmp
%WINDIR%\temp\cabc2f.tmp
%WINDIR%\temp\tarc30.tmp
%WINDIR%\temp\cabdc7.tmp
%WINDIR%\temp\tardc8.tmp
%WINDIR%\temp\cabe75.tmp
%WINDIR%\temp\tare76.tmp
%WINDIR%\temp\cabf8f.tmp
%WINDIR%\temp\tarf90.tmp
%WINDIR%\temp\cabfdf.tmp
%WINDIR%\temp\tarfe0.tmp
%WINDIR%\temp\cab1251.tmp
%WINDIR%\temp\tar1252.tmp
%WINDIR%\temp\cab134d.tmp
%WINDIR%\temp\tar134e.tmp
%WINDIR%\temp\cab1a32.tmp
%WINDIR%\temp\tar1a33.tmp
%TEMP%\rarsfx0\autodesklicensepatcherinstaller.bat
%TEMP%\rarsfx0\files\networklicensemanager\adskflex.exe
%TEMP%\rarsfx0\files\networklicensemanager\license.lic
%TEMP%\rarsfx0\files\networklicensemanager\lmgrd.exe
%TEMP%\rarsfx0\files\networklicensemanager\lmtools.exe
%TEMP%\rarsfx0\files\patchedfiles\netapi32.dll
%TEMP%\rarsfx0\files\patchedfiles\version.dll
%TEMP%\rarsfx0\files\service\service.bat
%TEMP%\rarsfx0\files\service\service.exe
%TEMP%\rarsfx0\files\task\autodesk.xml
%TEMP%\rarsfx0\files\tweak\tweak.reg
%TEMP%\rarsfx0\files\tweak\unnamed.json

Сетевая активность

Подключается к

'ev######.ws.symantec.com':80

TCP

Запросы HTTP GET

http://ev######.ws.symantec.com/evcs.crl

UDP

DNS ASK ev######.ws.symantec.com

Другое

Ищет следующие окна

ClassName: 'Edit' WindowName: ''
ClassName: '' WindowName: ''
ClassName: 'RegEdit_RegEdit' WindowName: ''

Создает и запускает на исполнение

'%CommonProgramFiles(x86)%\autodesk shared\network license manager\service.exe'

Запускает на исполнение

'<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\AutodeskLicensePatcherInstaller.bat" "
'<SYSTEM32>\chcp.com' 1254
'<SYSTEM32>\mode.com' con: cols=70 lines=15
'<SYSTEM32>\reg.exe' add hkcu\software\classes\.Admin\shell\runas\command /f /ve /d "cmd /x /d /r set \"f0=%2\" &call \"%2\" %3"
'<SYSTEM32>\fltmc.exe'
'<SYSTEM32>\ping.exe' 127.0.0.1 -n 15
'<SYSTEM32>\ping.exe' 127.0.0.1 -n 5
'<SYSTEM32>\net1.exe' stop AdskLicensingService
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -nop -c "Get-WmiObject -Query ' select * from Win32_Product where Name like \"%Autodesk Network License Manager%\" ' | ForEach-Object { ($_).Uninstall()}"
'%WINDIR%\regedit.exe' /s "%TEMP%\RarSFX0\\Files\Tweak\Tweak.reg"
'<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\\Files\NetworkLicenseManager\adskflex.exe" "%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\" /Y /K /R /S /H /i
'<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\\Files\NetworkLicenseManager\lmgrd.exe" "%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\" /Y /K /R /S /H /i
'<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\\Files\NetworkLicenseManager\License.lic" "%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\" /Y /K /R /S /H /i
'<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\\Files\Service\Service.exe" "%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\" /Y /K /R /S /H /i
'<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\\Files\PatchedFiles\version.dll" "%CommonProgramFiles(x86)%\Autodesk Shared\AdskLicensing\Current\AdskLicensingAgent\" /Y /K /R /S /H /i
'<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\\Files\PatchedFiles\netapi32.dll" "%CommonProgramFiles(x86)%\Autodesk Shared\AdskLicensing\Current\AdskLicensingAgent\" /Y /K /R /S /H /i
'<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\\Files\PatchedFiles\netapi32.dll" "%CommonProgramFiles(x86)%\Autodesk Shared\Adlm\R28\" /Y /K /R /S /H /i
'<SYSTEM32>\xcopy.exe' "%TEMP%\RarSFX0\\Files\Tweak\UnNamed.json" "%APPDATA%\Autodesk\ADPSDK\UserConsent\" /Y /K /R /S /H /i
'<SYSTEM32>\cmd.exe' /c Powershell -noprofile -executionpolicy bypass -command "((Get-NetAdapter -Physical | ? PnPDeviceID -match '^PCI|^USB' | Sort PnPDeviceID -Descending).MacAddress | Select -Last 1) -replace '-...
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -noprofile -executionpolicy bypass -command "((Get-NetAdapter -Physical | ? PnPDeviceID -match '^PCI|^USB' | Sort PnPDeviceID -Descending).MacAddress | Select -Last 1) -replace '-'"
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "(gc License.lic) -replace 'MAC', ' ' | Out-File -encoding ASCII License.lic"
'<SYSTEM32>\sc.exe' config "AdskLicensingService" Start= Auto
'<SYSTEM32>\schtasks.exe' /Delete /tn "\Microsoft\Windows\Autodesk\Autodesk" /f
'<SYSTEM32>\schtasks.exe' /Create /XML %TEMP%\RarSFX0\\Files\Task\Autodesk.xml /tn "\Microsoft\Windows\Autodesk\Autodesk"
'<SYSTEM32>\net.exe' start AdskLicensingService
'<SYSTEM32>\net1.exe' start AdskLicensingService
'%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles(x86)%\Autodesk Shared\Network License Manager\Service.bat" " (со скрытым окном)
'%WINDIR%\syswow64\chcp.com' 1254
'%WINDIR%\syswow64\mode.com' con: cols=70 lines=12
'%WINDIR%\syswow64\reg.exe' add hkcu\software\classes\.Admin\shell\runas\command /f /ve /d "cmd /x /d /r set \"f0=%2\" &call \"%2\" %3"
'%WINDIR%\syswow64\fltmc.exe'
'%WINDIR%\syswow64\ping.exe' 127.0.0.1 -n 5
'%WINDIR%\syswow64\net1.exe' stop AdskLicensingService

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней