Техническая информация
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\Temp\stopcop.cmd" "
- '%WINDIR%\regedit.exe' /s showmecop.reg
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\Temp\showmecop_add.cmd" "
- '%WINDIR%\regedit.exe' /s final.reg
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\Temp\final_add.cmd" "
- '<SYSTEM32>\taskkill.exe' /f /im staffcop*
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Temp\final_run.vbs"
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' /i %WINDIR%\Temp\StaffCopHome.msi TRANSFORMS="%WINDIR%\Temp\StaffCopHome.mst" /qn /norestart
- '%WINDIR%\regedit.exe' /s "%TEMP%\UCtmp.reg"
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Temp\hide_cmd.vbs"
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Temp\staff_start-drop.vbs"
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Temp\showmecop_run.vbs"
- %WINDIR%\Temp\showmecop_run.vbs
- %WINDIR%\Temp\final.reg
- %WINDIR%\Temp\showmecop_add.cmd
- %WINDIR%\Temp\final_add.cmd
- %WINDIR%\Temp\final_run.vbs
- %WINDIR%\Installer\24760.mst
- %APPDATA%\StaffCop Home
- %WINDIR%\Installer\2475f.msi
- %WINDIR%\Temp\showmecop.reg
- %TEMP%\UCtmp.reg
- %WINDIR%\Temp\staff_start-drop.vbs
- %WINDIR%\Temp\stopcop.cmd
- %WINDIR%\Temp\StaffCopHome.mst
- %WINDIR%\Temp\hide_cmd.vbs
- %TEMP%\nse2.tmp\System.dll
- %WINDIR%\Temp\StaffCopHome.msi
- %WINDIR%\Temp\filters.xml
- %WINDIR%\Temp\license.dat
- %WINDIR%\Temp\applist.ini
- %WINDIR%\Temp\tasks.xml
- %WINDIR%\Temp\user.xml
- %TEMP%\nse2.tmp\System.dll
- %WINDIR%\Installer\2475f.msi
- %WINDIR%\Installer\24760.mst
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'