Техническая информация
- '%TEMP%\nsl3.tmp\ns6.tmp' regedit.exe /s "\StopDD.reg"
- '%TEMP%\nsl3.tmp\ns7.tmp' "\Uninst.exe"
- '%TEMP%\nsl3.tmp\ns4.tmp' "sc.exe" delete DD_Service
- '%TEMP%\nsl3.tmp\ns5.tmp' "net.exe" stop DD_Service
- '<SYSTEM32>\net1.exe' stop DD_Service
- '%WINDIR%\regedit.exe' /s "\StopDD.reg"
- '<SYSTEM32>\sc.exe' delete DD_Service
- '<SYSTEM32>\net.exe' stop DD_Service
- %TEMP%\nsl3.tmp\ns5.tmp
- %TEMP%\nsl3.tmp\ns4.tmp
- %TEMP%\nsl3.tmp\ns7.tmp
- %TEMP%\nsl3.tmp\ns6.tmp
- %TEMP%\nsl3.tmp\default.bmp
- %TEMP%\nsq2.tmp
- %TEMP%\nsl3.tmp\nsExec.dll
- %TEMP%\nsl3.tmp\Splash.dll
- %TEMP%\nsl3.tmp\default.bmp
- %TEMP%\nsl3.tmp\nsExec.dll
- %TEMP%\nsl3.tmp\Splash.dll
- %TEMP%\nsl3.tmp\ns7.tmp
- %TEMP%\nsl3.tmp\ns4.tmp
- %TEMP%\nsl3.tmp\ns5.tmp
- %TEMP%\nsl3.tmp\ns6.tmp
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'SysListView32' WindowName: '(null)'
- ClassName: '#32770' WindowName: '(null)'