Техническая информация
- iexplore.exe
- firefox.exe
- %TEMP%\nsz2.tmp
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nsc4.tmp
- %TEMP%\nsq5.tmp\nsprocess.dll
- %TEMP%\nsq5.tmp\nsexec.dll
- %TEMP%\nsq5.tmp\ns6.tmp
- %TEMP%\nsq5.tmp\version.dll
- %TEMP%\sqlite3.exe
- %TEMP%\nsq5.tmp\ns7.tmp
- %TEMP%\nsq5.tmp\inetc.dll
- %TEMP%\nsq5.tmp\ns6.tmp
- %TEMP%\nsq5.tmp\ns7.tmp
- %TEMP%\nsq5.tmp\inetc.dll
- %TEMP%\nsq5.tmp\nsexec.dll
- %TEMP%\nsq5.tmp\nsprocess.dll
- %TEMP%\nsq5.tmp\version.dll
- ClassName: '#32770' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Текущая директория>\
- '%TEMP%\nsq5.tmp\ns6.tmp' regsvr32.exe "<Текущая директория>\FastFreeConverter.dll" /u /s
- '%TEMP%\nsq5.tmp\ns7.tmp' %TEMP%\sqlite3.exe %TEMP%\22ie2h77.default\extensions.sqlite "DELETE FROM addon WHERE id='extension@FastFreeConverter.com'"
- '%TEMP%\sqlite3.exe' %TEMP%\22ie2h77.default\extensions.sqlite "DELETE FROM addon WHERE id='extension@FastFreeConverter.com'"
- '%TEMP%\nsq5.tmp\ns6.tmp' regsvr32.exe "<Текущая директория>\FastFreeConverter.dll" /u /s' (со скрытым окном)
- '%TEMP%\nsq5.tmp\ns7.tmp' %TEMP%\sqlite3.exe %TEMP%\22ie2h77.default\extensions.sqlite "DELETE FROM addon WHERE id='extension@FastFreeConverter.com'"' (со скрытым окном)
- '<SYSTEM32>\regsvr32.exe' "<Текущая директория>\FastFreeConverter.dll" /u /s