Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- %TEMP%\IXP000.TMP\update\updatebr.inf
- %TEMP%\IXP000.TMP\update\update_SP3GDR.inf
- %TEMP%\IXP000.TMP\update\update.ver
- %TEMP%\IXP000.TMP\update\tzchange.dll
- %TEMP%\IXP000.TMP\update\update.exe
- %TEMP%\IXP000.TMP\update\update_SP4W2K.inf
- %WINDIR%\inf\oem3.inf
- %WINDIR%\inf\oem3.PNF
- <SYSTEM32>\TZLog.log
- %TEMP%\IXP000.TMP\update\updspapi.dll
- %WINDIR%\KB2543367.log
- %TEMP%\IXP000.TMP\update\spcustom.dll
- %TEMP%\IXP000.TMP\spuninst.exe
- %TEMP%\IXP000.TMP\tzchange.dll
- %TEMP%\IXP000.TMP\spmsg.dll
- %TEMP%\IXP000.TMP\CABARC.EXE
- %TEMP%\IXP000.TMP\setup.cmd
- %TEMP%\IXP000.TMP\tzchange.exe
- %TEMP%\IXP000.TMP\update\eula.txt
- %TEMP%\IXP000.TMP\update\KB2543367.CAT
- %TEMP%\IXP000.TMP\update\branches.inf
- %TEMP%\IXP000.TMP\update.cab
- %TEMP%\IXP000.TMP\update\CABARC.EXE
- '%TEMP%\IXP000.TMP\update\update.exe'
- '%TEMP%\IXP000.TMP\update\CABARC.EXE' -p -o X ..\UPDATE.CAB ..\
- '<SYSTEM32>\cmd.exe' /c %TEMP%\IXP000.TMP\setup.cmd