Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- %TEMP%\IXP000.TMP\update\update_SP3QFE.inf
- %TEMP%\IXP000.TMP\update\update_SP4W2K.inf
- %TEMP%\IXP000.TMP\update\update_SP3GDR.inf
- %TEMP%\IXP000.TMP\update\update.ver
- %TEMP%\IXP000.TMP\update\updatebr.inf
- %TEMP%\IXP000.TMP\update\updspapi.dll
- %WINDIR%\inf\oem3.inf
- %WINDIR%\inf\oem3.PNF
- %WINDIR%\KB2544521.log
- %TEMP%\IXP000.TMP\SP3GDR\vgx.dll
- %TEMP%\IXP000.TMP\SP3QFE\vgx.dll
- %TEMP%\IXP000.TMP\spuninst.exe
- %TEMP%\IXP000.TMP\update.cab
- %TEMP%\IXP000.TMP\spmsg.dll
- %TEMP%\IXP000.TMP\cabarc.exe
- %TEMP%\IXP000.TMP\setup.cmd
- %TEMP%\IXP000.TMP\update\cabarc.exe
- %TEMP%\IXP000.TMP\update\spcustom.dll
- %TEMP%\IXP000.TMP\update\update.exe
- %TEMP%\IXP000.TMP\update\KB2544521.CAT
- %TEMP%\IXP000.TMP\update\branches.inf
- %TEMP%\IXP000.TMP\update\eula.txt
- '%TEMP%\IXP000.TMP\update\update.exe'
- '%TEMP%\IXP000.TMP\update\cabarc.exe' -p -o X ..\UPDATE.CAB ..\
- '<SYSTEM32>\cmd.exe' /c %TEMP%\IXP000.TMP\setup.cmd