Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\srviecheck] 'ImagePath' = '%WINDIR%\iecheck.exe srv'
- [<HKLM>\SYSTEM\ControlSet001\Services\srviecheck] 'Start' = '00000002'
- '<SYSTEM32>\sc.exe' create "srviecheck" binpath= "%WINDIR%\iecheck.exe srv" start= "auto"
- '<SYSTEM32>\taskkill.exe' /F /IM iecheck.exe
- '<SYSTEM32>\net1.exe' start "srviecheck"
- '<SYSTEM32>\net.exe' start "srviecheck"
- '<SYSTEM32>\net.exe' stop "srviecheck"
- '<SYSTEM32>\sc.exe' queryex "srviecheck"
- '<SYSTEM32>\sc.exe' delete "srviecheck"
- '<SYSTEM32>\net1.exe' stop "srviecheck"
- %WINDIR%\iecheck.exe
- ClassName: '' WindowName: ''