Техническая информация
- '<SYSTEM32>\RMSw\install.exe'
- '<SYSTEM32>\wscript.exe' "%APPDATA%\Remote Manipulator Files\lnk.vbs" /start
- '<SYSTEM32>\taskkill.exe' /f /im rutview.exe
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\install.bat" "
- <SYSTEM32>\RMSw\eula.rtf1
- %TEMP%\1.tmp\install.bat
- <SYSTEM32>\RMSw\microsoft.vc90.crt.manifest
- <SYSTEM32>\RMSw\russian.lg
- <SYSTEM32>\RMSw\russian.lng
- %APPDATA%\Remote Manipulator Files\lnk.vbs
- %HOMEPATH%\Desktop\RMS.lnk
- %APPDATA%\Remote Manipulator Files\config_4.xml
- <SYSTEM32>\RMSw\config_4.xml
- <SYSTEM32>\RMSw\lnk.vbs
- <SYSTEM32>\RMSw\rutserv.exe1
- <SYSTEM32>\RMSw\dsfvorbisencoder.dll
- <SYSTEM32>\RMSw\gdiplus.dll
- <SYSTEM32>\RMSw\dsfvorbisdecoder.dll
- <SYSTEM32>\RMSw\install.exe
- <SYSTEM32>\RMSw\rutview.exe
- <SYSTEM32>\RMSw\vp8encoder.dll
- <SYSTEM32>\RMSw\webmmux.dll
- <SYSTEM32>\RMSw\vp8decoder.dll
- <SYSTEM32>\RMSw\msvcp90.dll
- <SYSTEM32>\RMSw\msvcr90.dll
- <SYSTEM32>\RMSw\lnk.vbs
- %TEMP%\1.tmp\install.bat
- %APPDATA%\Remote Manipulator Files\lnk.vbs
- <SYSTEM32>\RMSw\config_4.xml
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''