Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\System.lnk
- %TEMP%\$inst\2.tmp
- %TEMP%\files\x64\cleanospp.exe
- %TEMP%\files\x86\cleanospp.exe
- %TEMP%\files\Uninstall.xml
- %TEMP%\files\Configure.xml
- C:\ueozpr2\windows10.2.exe
- %TEMP%\files\files.dat
- %TEMP%\files\setup16.exe
- <SYSTEM32>\msvcp140.dll
- <SYSTEM32>\vcruntime140.dll
- %HOMEPATH%\zienLo\peoiveo.vbs
- %HOMEPATH%\zienLo\file.exe
- %ProgramFiles%\Office 2013-2016 C2R\Office 2013-2016 C2R Install\Uninstall.ini
- %ProgramFiles%\Office 2013-2016 C2R\Office 2013-2016 C2R Install\Uninstall.exe
- %TEMP%\$inst\0001.tmp
- %TEMP%\OInstall.exe
- %TEMP%\Microsoft.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\files\x86\msvcr100.dll
- %TEMP%\files\x64\msvcr100.dll
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\0001.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\5.tmp
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\Microsoft.exe'
- '%TEMP%\OInstall.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\zienLo\peoiveo.vbs"
- '%HOMEPATH%\zienLo\file.exe' -pbiew3idooc
- '%TEMP%\files\files.dat' -y -pkmsauto
- 'C:\ueozpr2\windows10.2.exe'
- '<SYSTEM32>\cmd.exe' /D /c files.dat -y -pkmsauto