Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\updater.lnk
- %APPDATA%\microsoft\windows\reorder\updater.mod
- %APPDATA%\microsoft\windows\reorder\glue30.dll
- %APPDATA%\microsoft\windows\reorder\updater.exe
- %TEMP%\product overviev.xls
- %TEMP%\w7320789.bak
- %TEMP%\w7320789.bak
- DNS ASK google.com
- DNS ASK we####.mydrive.ch
- ClassName: '' WindowName: 'Open fullscreen?'
- ClassName: 'XLMAIN' WindowName: 'Microsoft Excel (Product Activation Failed) - Book1'
- ClassName: 'XLMAIN' WindowName: ''
- '%APPDATA%\microsoft\windows\reorder\updater.exe' "%APPDATA%\Microsoft\Windows\Reorder\updater.mod",callme@16 32bitshim_usbpowersaving_asus_btree
- '%APPDATA%\microsoft\windows\reorder\updater.exe' "%APPDATA%\Microsoft\Windows\Reorder\updater.mod",callme@16 32bitshim_usbpowersaving_asus_btree' (со скрытым окном)
- '%ProgramFiles%\microsoft office\office14\excel.exe' /dde