Техническая информация
- %TEMP%\$fixuninst_flash\crack.cmd
- %TEMP%\$fixuninst_flash\uninstall_flash_player.exe
- %WINDIR%\syswow64\macromed\temp\{60a57ed1-4c89-4e14-9bc7-cf4d27b23120}\fpb.tmp
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\$fixuninst_flash\uninstall_flash_player.exe'
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\$fixuninst_flash\crack.cmd" "
- '%WINDIR%\syswow64\cmd.exe' /S /D /c" type <DRIVERS>\etc\hosts "
- '%WINDIR%\syswow64\find.exe' "geo2.adobe.com"