Техническая информация
- '<SYSTEM32>\reg.exe' delete "HKLM\SYSTEM\Remote Manipulator System" /f
- '<SYSTEM32>\attrib.exe' -s -h "<SYSTEM32>\catroot"
- '<SYSTEM32>\reg.exe' delete "HKEY_CLASSES_ROOT\Installer\Products\E629DA2CCD54F5C4880A36EA6E3A62A2\SourceList"
- '<SYSTEM32>\taskkill.exe' /f /im rfusclient.exe
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\de.bat" "
- '<SYSTEM32>\ping.exe' localhost
- '<SYSTEM32>\taskkill.exe' /f /im rutserv.exe
- <SYSTEM32>\FXSEXT.ecf
- %TEMP%\1.tmp\FXSEXT.ecf
- %TEMP%\1.tmp\de.bat
- ClassName: '(null)' WindowName: '(null)'