Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /f /im taskger.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im nvtray.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im ping.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im csql.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im cscript.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im net1.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im mshta.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im ntsd.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im secedit.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im ws.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im rnaphin.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im drwtsn32.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im SQLAGENTSUW.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im SQLAGENTSPW.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im SQLAGENTA.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im SQLAGENTN.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im SQLAGENTC.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im SQLAGENTSWA.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im wscript.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im taskmgr.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im taskmgzr.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im ntvdm.exe
- '%WINDIR%\syswow64\taskkill.exe' /f /im schtasks.exe
- <Current directory>update2.bat
- %TEMP%\sqlagentswb.exe
- %LOCALAPPDATA%\tempupdate2.bat
- %WINDIR%\temp\adobearm.log
- %WINDIR%\temp\ts_8e67.tmp
- %WINDIR%\temp\ts_77d1.tmp
- %WINDIR%\temp\ts_5080.tmp
- %WINDIR%\temp\ts_4f66.tmp
- %WINDIR%\temp\ts_39ba.tmp
- %WINDIR%\temp\ts_3852.tmp
- <Current directory>update2.bat
- %WINDIR%\temp\ts_361e.tmp
- %WINDIR%\temp\ts_2bfb.tmp
- %WINDIR%\temp\ts_2b0f.tmp
- %WINDIR%\temp\ts_267a.tmp
- %WINDIR%\temp\fxstiffdebuglogfile.txt
- %WINDIR%\temp\fxsapidebuglogfile.txt
- %WINDIR%\temp\dmi8538.tmp
- %WINDIR%\temp\ts_316a.tmp
- %LOCALAPPDATA%\tempupdate2.bat
- http://c.####vvvvv.ga:443/o/cpu64.exe via c.###vvvvvv.ga
- DNS ASK c.###vvvvvv.ga
- ClassName: '' WindowName: ''
- '%TEMP%\sqlagentswb.exe'
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\Users\MSSQLSERVER\AppData\Local\Temp\*' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %WINDIR%\Temp\*' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %WINDIR%\ServiceProfiles\NetworkService\AppData\Local\Temp\*' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\Users\Administrator\AppData\Local\Temp\*' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c <Current directory>Update2.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping 1.1.1.1 -n 1 -w 1000 & start %TEMP%\SQLAGENTSWB.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c %LOCALAPPDATA%\TempUpdate2.bat' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\cacls.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\cacls.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\cacls.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\MSSQLSERVER\AppData\Local\Temp\sqlagentc.exe /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\cacls.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\cmd.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\cmd.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\cmd.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\ftp.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\ftp.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\ftp.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\ftp.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« CPUГЉГЌВ·Г…ГѓГ» ВЈВ« e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« CPUГЉГЌВ·Г…ГѓГ» ВЈВ« e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« sqlagentc.exe ВЈВ« e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\Users\MSSQL~1\AppData\Local\Temp\*' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im taskger.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im SQLAGENTA.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im SQLAGENTN.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im SQLAGENTC.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\RECYCLER\taskger.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im taskmgzr.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %PROGRAMDATA%\taskmgzr.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\RECYCLER\taskmgzr.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %PROGRAMDATA%\vget.vbs' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\RECYCLER\vget.vbs' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im taskmgr.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im wscript.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im SQLAGENTSWA.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\MSSQL~1\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« sqlagentc.exe ВЈВ« e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\cmd.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\MSSQL~1\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\Temp\sqlagentc.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\Temp\sqlagentc.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\ServiceProfiles\NetworkService\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\ServiceProfiles\NetworkService\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\1\sqlagentc.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\1\sqlagentc.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\2\sqlagentc.exe /e /t /g system:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\2\sqlagentc.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %PROGRAMDATA%\taskger.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\MSSQLSERVER\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im cmd.exe' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im taskger.exe
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\cmd.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\cmd.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\cmd.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\cacls.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\cacls.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\cacls.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\cacls.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c %LOCALAPPDATA%\TempUpdate2.bat
- '%WINDIR%\syswow64\ping.exe' 1.1.1.1 -n 1 -w 1000
- '%WINDIR%\syswow64\cacls.exe' "%WINDIR%\SysWOW64\cacls.exe" /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c ping 1.1.1.1 -n 1 -w 1000 & start %TEMP%\SQLAGENTSWB.exe
- '%WINDIR%\syswow64\cacls.exe' "%WINDIR%\SysWOW64\ftp.exe" /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' "<SYSTEM32>\ftp.exe" /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' "%WINDIR%\SysWOW64\ftp.exe" /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' "<SYSTEM32>\ftp.exe" /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' "%WINDIR%\SysWOW64\cmd.exe" /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' "<SYSTEM32>\cmd.exe" /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' "%WINDIR%\SysWOW64\cmd.exe" /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' "<SYSTEM32>\cmd.exe" /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' "%WINDIR%\SysWOW64\cacls.exe" /e /t /g system:f
- '%WINDIR%\syswow64\wbem\wmic.exe' process where "name='wininit.exe' and ExecutablePath<>'C:\\Windows\\system32\\wininit.exe'" call Terminate
- '%WINDIR%\syswow64\cacls.exe' "<SYSTEM32>\cacls.exe" /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\cmd.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' <SYSTEM32>\ftp.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« CPUГЉГЌВ·Г…ГѓГ» ВЈВ« e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\SysWOW64\ftp.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« CPUГЉГЌВ·Г…ГѓГ» ВЈВ« e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' <SYSTEM32>\cacls.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\SysWOW64\cacls.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' <SYSTEM32>\cmd.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\SysWOW64\cmd.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' <SYSTEM32>\cmd.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' <SYSTEM32>\ftp.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\ftp.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\ftp.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\SysWOW64\cmd.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' <SYSTEM32>\cacls.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\SysWOW64\ftp.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« sqlagentc.exe ВЈВ« e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« sqlagentc.exe ВЈВ« e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« CPUГЉГЌВ·Г…ГѓГ» ВЈВ« e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« CPUГЉГЌВ·Г…ГѓГ» ВЈВ« e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\SysWOW64\ftp.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls <SYSTEM32>\ftp.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\SysWOW64\cacls.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' "<SYSTEM32>\cacls.exe" /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c <Current directory>Update2.bat
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\Users\Administrator\AppData\Local\Temp\*
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\ServiceProfiles\NetworkService\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\ServiceProfiles\NetworkService\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls %WINDIR%\Temp\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\MSSQLSERVER\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\MSSQLSERVER\AppData\Local\Temp\sqlagentc.exe /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\MSSQL~1\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\1\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\MSSQL~1\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im wscript.exe
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im taskmgr.exe
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\RECYCLER\vget.vbs
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %PROGRAMDATA%\vget.vbs
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\RECYCLER\taskmgzr.exe
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %PROGRAMDATA%\taskmgzr.exe
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im taskmgzr.exe
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\RECYCLER\taskger.exe
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %PROGRAMDATA%\taskger.exe
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im SQLAGENTSWA.exe
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\1\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\2\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %WINDIR%\ServiceProfiles\NetworkService\AppData\Local\Temp\*
- '%WINDIR%\syswow64\cacls.exe' C:\Users\Administrator\AppData\Local\Temp\2\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q %WINDIR%\Temp\*
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\Users\MSSQLSERVER\AppData\Local\Temp\*
- '%WINDIR%\syswow64\cmd.exe' /c del /f /a /q C:\Users\MSSQL~1\AppData\Local\Temp\*
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im SQLAGENTA.exe
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\ServiceProfiles\NetworkService\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\Administrator\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\Administrator\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\Administrator\AppData\Local\Temp\1\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\Administrator\AppData\Local\Temp\1\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\Administrator\AppData\Local\Temp\2\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c cacls C:\Users\Administrator\AppData\Local\Temp\2\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\Temp\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' %WINDIR%\ServiceProfiles\NetworkService\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\MSSQL~1\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\MSSQL~1\AppData\Local\Temp\sqlagentc.exe /e /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\MSSQLSERVER\AppData\Local\Temp\sqlagentc.exe /t /g system:f
- '%WINDIR%\syswow64\cacls.exe' C:\Users\MSSQLSERVER\AppData\Local\Temp\sqlagentc.exe /e /t /g everyone:f
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im SQLAGENTN.exe
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im SQLAGENTC.exe
- '%WINDIR%\syswow64\cacls.exe' ВЈВ« È¡ÌГ¶¨Ä¿Â¼ (11) ВЈВ« sqlagentc.exe ВЈВ« e /t /g system:f
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im cmd.exe