Техническая информация
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %ProgramFiles(x86)%\alien skin software, llc\exposure 4\alien skin exposure 4 x64.exe
- %APPDATA%\dllhost.exe
- %ProgramFiles(x86)%\alien skin software, llc\exposure 4\uninstall.exe
- %ProgramFiles(x86)%\alien skin software, llc\exposure 4\uninstall.ini
- %TEMP%\ixp000.tmp\ndxdx.exe
- %TEMP%\ixp000.tmp\gmqvh.bui
- %TEMP%\ixp000.tmp\jlfxahb.mmh
- %HOMEPATH%\cedmw\gmqvh.bui
- %HOMEPATH%\cedmw\jlfxahb.mmh
- %HOMEPATH%\cedmw\ndxdx.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\ixp000.tmp\gmqvh.bui в %HOMEPATH%\cedmw\gmqvh.bui
- %TEMP%\ixp000.tmp\jlfxahb.mmh в %HOMEPATH%\cedmw\jlfxahb.mmh
- %TEMP%\ixp000.tmp\ndxdx.exe в %HOMEPATH%\cedmw\ndxdx.exe
- '%ProgramFiles(x86)%\alien skin software, llc\exposure 4\alien skin exposure 4 x64.exe'
- '%APPDATA%\dllhost.exe'
- '%TEMP%\ixp000.tmp\ndxdx.exe' gmqvh.bui
- '%WINDIR%\syswow64\cmd.exe' /c schtasks /create /sc minute /mo 5 /tn cedmw /tr "%HOMEPATH%\cedmw\ndxdx.exe %HOMEPATH%\cedmw\gmqvh.bui"' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c schtasks /create /sc minute /mo 5 /tn cedmw /tr "%HOMEPATH%\cedmw\ndxdx.exe %HOMEPATH%\cedmw\gmqvh.bui"
- '%WINDIR%\syswow64\schtasks.exe' /create /sc minute /mo 5 /tn cedmw /tr "%HOMEPATH%\cedmw\ndxdx.exe %HOMEPATH%\cedmw\gmqvh.bui"