Техническая информация
- '%TEMP%\nsl2.tmp\ns8.tmp' "sc.exe" delete RZ_CAD
- '%TEMP%\nsl2.tmp\ns7.tmp' "sc.exe" delete RZ_Service
- '%TEMP%\nsl2.tmp\nsA.tmp' "\Uninst.exe"
- '%TEMP%\nsl2.tmp\ns9.tmp' ""
- '%TEMP%\nsl2.tmp\ns4.tmp' "sc.exe" stop RZ_CAD
- '%TEMP%\nsl2.tmp\ns3.tmp' "sc.exe" stop RZ_Service
- '%TEMP%\nsl2.tmp\ns6.tmp' "net.exe" stop RZ_CAD
- '%TEMP%\nsl2.tmp\ns5.tmp' "net.exe" stop RZ_Service
- '<SYSTEM32>\net1.exe' stop RZ_CAD
- '<SYSTEM32>\net.exe' stop RZ_CAD
- '<SYSTEM32>\sc.exe' delete RZ_CAD
- '<SYSTEM32>\sc.exe' delete RZ_Service
- '<SYSTEM32>\sc.exe' stop RZ_CAD
- '<SYSTEM32>\sc.exe' stop RZ_Service
- '<SYSTEM32>\net1.exe' stop RZ_Service
- '<SYSTEM32>\net.exe' stop RZ_Service
- %TEMP%\nsl2.tmp\nsA.tmp
- %TEMP%\nsl2.tmp\ns9.tmp
- %TEMP%\nsl2.tmp\ns8.tmp
- <Текущая директория>\RZ-Done.txt
- <Текущая директория>\UnRZ.txt
- <Текущая директория>\RZ.txt
- %TEMP%\nsl2.tmp\ns4.tmp
- %TEMP%\nsl2.tmp\ns3.tmp
- %TEMP%\nsl2.tmp\nsExec.dll
- %TEMP%\nsl2.tmp\ns7.tmp
- %TEMP%\nsl2.tmp\ns6.tmp
- %TEMP%\nsl2.tmp\ns5.tmp
- %TEMP%\nsl2.tmp\nsA.tmp
- %TEMP%\nsl2.tmp\ns9.tmp
- <Текущая директория>\RZ.txt
- %TEMP%\nsl2.tmp\nsExec.dll
- <Текущая директория>\UnRZ.txt
- %TEMP%\nsl2.tmp\ns8.tmp
- %TEMP%\nsl2.tmp\ns4.tmp
- %TEMP%\nsl2.tmp\ns3.tmp
- %TEMP%\nsl2.tmp\ns5.tmp
- %TEMP%\nsl2.tmp\ns7.tmp
- %TEMP%\nsl2.tmp\ns6.tmp
- ClassName: 'SysListView32' WindowName: '(null)'
- ClassName: '#32770' WindowName: '(null)'
- ClassName: 'RemoteZilla desktop sink' WindowName: '(null)'