Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\fltsrv] 'ImagePath' = 'System32\DRIVERS\fltsrv.sys'
- '<SYSTEM32>\reg.exe' ADD HKLM\SYSTEM\ControlSet001\Services\fltsrv /f /v "ImagePath" /T REG_SZ /D "System32\DRIVERS\fltsrv.sys"
- '<SYSTEM32>\reg.exe' ADD HKLM\SYSTEM\ControlSet001\Services\fltsrv /f /v "DisplayName" /T REG_SZ /D "Acronis Storage Filter Management"
- '<SYSTEM32>\reg.exe' ADD HKLM\SYSTEM\ControlSet001\Services\fltsrv /f /v "Type" /T REG_DWORD /D "1"
- '<SYSTEM32>\reg.exe' ADD HKLM\SYSTEM\ControlSet001\Services\fltsrv /f /v "Start" /T REG_DWORD /D "3"
- '<SYSTEM32>\reg.exe' ADD HKLM\SYSTEM\Setup /f /v "SystemSetupInProgress" /T REG_DWORD /D "1"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\2840NN2B.bat" <Полный путь к файлу>"
- '<SYSTEM32>\reg.exe' ADD HKLM\SYSTEM\ControlSet001\Services\fltsrv /f /v "ErrorControl" /T REG_DWORD /D "0"
- '<SYSTEM32>\reg.exe' ADD HKLM\SYSTEM\ControlSet001\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F} /f /v "UpperFilters" /T REG_MULTI_SZ /D "fltsrv"
- %TEMP%\2840NN2B.bat
- %TEMP%\2840NN2B.bat