Техническая информация
- '<SYSTEM32>\net.exe' stop ccmexec
- '<SYSTEM32>\net1.exe' stop ccmexec
- '<SYSTEM32>\sc.exe' config ccmexec start= disabled
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\LoanerW7-2.bat" <Текущая директория>\"
- '<SYSTEM32>\secedit.exe' /configure /cfg %WINDIR%\inf\Security.inf /db defltbase.sdb
- %WINDIR%\security\edb.log
- %WINDIR%\security\res1.log
- %WINDIR%\security\res2.log
- %WINDIR%\security\logs\scesrv.log
- %WINDIR%\security\edb.chk
- %WINDIR%\security\tmp.edb
- %WINDIR%\security\edbtmp.log
- %TEMP%\1.tmp\Security.inf
- %TEMP%\1.tmp\MerckWallpaper.jpg
- %TEMP%\1.tmp\LoanerW7-2.bat
- %TEMP%\1.tmp\Registry.pol
- %TEMP%\1.tmp\Registrym.pol
- %TEMP%\1.tmp\GPT.INI
- %TEMP%\1.tmp\Registrym.pol
- %TEMP%\1.tmp\Registry.pol
- %TEMP%\1.tmp\LoanerW7-2.bat
- %TEMP%\1.tmp\MerckWallpaper.jpg
- %TEMP%\1.tmp\Security.inf
- %TEMP%\1.tmp\GPT.INI
- %WINDIR%\security\edbtmp.log в %WINDIR%\security\edb.log