Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- %TEMP%\IXP000.TMP\IE7Brand.cmd
- %TEMP%\IXP000.TMP\eula.rtf
- %TEMP%\IXP000.TMP\iesetup.ini
- %TEMP%\IXP000.TMP\iesetup.exe
- %TEMP%\IXP000.TMP\Update.inf
- %WINDIR%\ie7_main.log
- %TEMP%\IXP000.TMP\ie7.cat
- %TEMP%\IXP000.TMP\legitlibm.dll
- %TEMP%\IXP000.TMP\INSTALL.INS
- %TEMP%\IXP000.TMP\advpack.dll
- %TEMP%\IXP000.TMP\inseng.dll
- %TEMP%\IXP000.TMP\Wininet.dll
- %TEMP%\IXP000.TMP\Urlmon.dll
- %TEMP%\IXP000.TMP\iesetup.cif
- %TEMP%\IXP000.TMP\BRANDING.CAB
- %TEMP%\IXP000.TMP\ieakcust.dll
- %TEMP%\IXP000.TMP\iedkcs32.dll
- %TEMP%\IXP000.TMP\iedkcs32.dll
- %TEMP%\IXP000.TMP\ieakcust.dll
- %TEMP%\IXP000.TMP\BRANDING.CAB
- %TEMP%\IXP000.TMP\iesetup.cif
- %TEMP%\IXP000.TMP\Urlmon.dll
- %TEMP%\IXP000.TMP\Wininet.dll
- %TEMP%\IXP000.TMP\inseng.dll
- %TEMP%\IXP000.TMP\advpack.dll
- %TEMP%\IXP000.TMP\ie7.cat
- %TEMP%\IXP000.TMP\eula.rtf
- %TEMP%\IXP000.TMP\Update.inf
- %TEMP%\IXP000.TMP\legitlibm.dll
- %TEMP%\IXP000.TMP\iesetup.ini
- %TEMP%\IXP000.TMP\INSTALL.INS
- %TEMP%\IXP000.TMP\IE7Brand.cmd
- %TEMP%\IXP000.TMP\iesetup.exe
- '%TEMP%\IXP000.TMP\iesetup.exe' /ieak-branding:%TEMP%\IXP000.TMP\ /quiet /norestart
- '<SYSTEM32>\cmd.exe' /c %TEMP%\IXP000.TMP\ie7Brand.cmd /quiet /norestart