Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\windows.vbs
- '%TEMP%\is-5K8UP.tmp\Setup.tmp' /SL5="$1016E,3200163,121344,%TEMP%\Setup.exe"
- '%TEMP%\RarSFX0\file.exe' -pttol4ToqF32RF
- '%TEMP%\RarSFX1\windows8.exe'
- '%TEMP%\Microsoft.exe'
- '%TEMP%\Setup.exe'
- '<SYSTEM32>\wscript.exe' "%TEMP%\RarSFX0\htevjkjt.vbs"
- %TEMP%\is-Q728A.tmp\ISDone.dll
- %TEMP%\is-5K8UP.tmp\Setup.tmp
- %TEMP%\RarSFX0\htevjkjt.vbs
- %TEMP%\is-Q728A.tmp\isskin.dll
- %ALLUSERSPROFILE%\Application Data\Isolated Storage\{64006C00-3500-3600-7600-460074003500}
- %TEMP%\RarSFX1\windows8.exe
- %TEMP%\is-Q728A.tmp\skin.cjstyles
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\RarSFX0\file.exe
- %ProgramFiles%\Need for Speed Payback\Need for Speed Payback Setup\Uninstall.ini
- %ProgramFiles%\Need for Speed Payback\Need for Speed Payback Setup\Uninstall.exe
- %TEMP%\$inst\5.tmp
- %TEMP%\RarSFX0\file.exe
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- ClassName: 'EDIT' WindowName: ''