Техническая информация
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' /i "%WINDIR%\Downloaded Installations\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN\vcredist.msi" TRANSFORMS="MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN.mst" /qb! /l*v %WINDIR%\msilogs\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN.LOG
- %WINDIR%\Downloaded Installations\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN\~GLH0000.TMP
- %WINDIR%\Downloaded Installations\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN\~GLH0001.TMP
- %WINDIR%\MSILOGS\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN.LOG
- %TEMP%\GLI5.tmp
- %TEMP%\GLC1.tmp
- %TEMP%\GLW2.tmp
- %TEMP%\GLG4.tmp
- %TEMP%\GLG4.tmp
- %TEMP%\GLW2.tmp
- %WINDIR%\Downloaded Installations\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN\~GLH0001.TMP в %WINDIR%\Downloaded Installations\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN\confirm.txt
- %WINDIR%\Downloaded Installations\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN\~GLH0000.TMP в %WINDIR%\Downloaded Installations\MS_VisualC++2005Redistributable_8.0.56336_SP1_PR00_EN\<Имя вируса>.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'