Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\RManService] 'Start' = '00000002'
- %WINDIR%\WinNT\rutserv.exe /server /silentinstall
- %WINDIR%\WinNT\rutserv.exe /server /firewall
- <SYSTEM32>\net1.exe stop RManService
- <SYSTEM32>\reg.exe import "%WINDIR%\key.reg
- <SYSTEM32>\net.exe stop RManService
- <SYSTEM32>\cmd.exe /c ""%WINDIR%\wasf.bat" "
- <SYSTEM32>\netsh.exe advfirewall firewall add rule name="Updates Windows" dir=in program="%WINDIR%\WinNT\rutserv.exe" security=notrequired action=allow
- %WINDIR%\WinNT\rfusclient.exe
- %WINDIR%\WinNT\rutserv.exe
- %WINDIR%\WinNT\rversionlib.dll
- %WINDIR%\wasf.bat
- %WINDIR%\rfusclient.exe
- %WINDIR%\key.reg
- %WINDIR%\rversionlib.dll
- %WINDIR%\rutserv.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''