Техническая информация
- %TEMP%\rarsfx0\activation.exe
- %TEMP%\rarsfx0\host.exe
- %TEMP%\rarsfx0\setup.exe
- %TEMP%\is-evnfq.tmp\activation.tmp
- %TEMP%\is-6lo5q.tmp\_isetup\_setup64.tmp
- %TEMP%\is-6lo5q.tmp\_isetup\_shfoldr.dll
- %LOCALAPPDATA%\is-f2b1o.tmp
- %TEMP%\is-6t2e4.tmp\host.tmp
- %TEMP%\is-g4eog.tmp\_isetup\_setup64.tmp
- %TEMP%\is-g4eog.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-g4eog.tmp\is-slshm.tmp
- %APPDATA%\license.rtf
- %TEMP%\is-6lo5q.tmp\_isetup\_setup64.tmp
- %TEMP%\is-6lo5q.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-evnfq.tmp\activation.tmp
- %TEMP%\is-g4eog.tmp\keygen.cmd
- %TEMP%\is-g4eog.tmp\_isetup\_setup64.tmp
- %TEMP%\is-g4eog.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-6t2e4.tmp\host.tmp
- %APPDATA%\license.rtf
- %LOCALAPPDATA%\is-f2b1o.tmp в %LOCALAPPDATA%\systemfl7.dat
- %TEMP%\is-g4eog.tmp\is-slshm.tmp в %TEMP%\is-g4eog.tmp\keygen.cmd
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\rarsfx0\activation.exe' /verysilent
- '%TEMP%\is-evnfq.tmp\activation.tmp' /SL5="$E0208,57404,56832,%TEMP%\RarSFX0\Activation.exe" /verysilent
- '%TEMP%\rarsfx0\host.exe' /verysilent
- '%TEMP%\is-6t2e4.tmp\host.tmp' /SL5="$100208,57010,56832,%TEMP%\RarSFX0\Host.exe" /verysilent
- '%TEMP%\rarsfx0\setup.exe'
- '%WINDIR%\syswow64\cmd.exe' /C ""%TEMP%\is-G4EOG.tmp\Keygen.cmd""
- '%WINDIR%\syswow64\find.exe' /C /I "www.ne####twares.net" <DRIVERS>\etc\hosts