Техническая информация
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\closeprocess.bat""
- <SYSTEM32>\taskkill.exe /F /FI "imagename ne cmd.exe" /FI "imagename ne Kill_Fix Quickly.exe" /FI "imagename ne Kill_Fix Quickly.lnk" /FI "username eq %USERNAME%"
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\ctfmon.exe
- %TEMP%\1.tmp\closeprocess.bat
- ClassName: '' WindowName: ''