Техническая информация
- '%TEMP%\RarSFX0\Finish.exe'
- '%TEMP%\RarSFX1\nircmd.exe' mediaplay 6000 "Finish.mp3"
- '%TEMP%\_iu14D2N.tmp' /SECONDPHASE="%PROGRAM_FILES%\Internet Download manager\unins000.exe" /FIRSTPHASEWND=$20124 /SILENT
- '%TEMP%\RarSFX0\c.exe'
- '%PROGRAM_FILES%\Internet Download manager\unins000.exe' /SILENT
- '%WINDIR%\regedit.exe' /s key.reg
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX1\finish.bat" "
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\IDMan.bat" "
- '<SYSTEM32>\taskkill.exe' /f /im IDMan.exe
- %TEMP%\_iu14D2N.tmp
- %PROGRAM_FILES%\Internet Download manager\unins000.dat
- %TEMP%\RarSFX1\finish.bat
- %TEMP%\RarSFX1\Finish.mp3
- %TEMP%\RarSFX1\nircmd.exe
- %PROGRAM_FILES%\Internet Download manager\key.reg
- %TEMP%\RarSFX0\c.exe
- %TEMP%\RarSFX0\IDMan.bat
- %TEMP%\RarSFX0\Finish.exe
- %PROGRAM_FILES%\Internet Download manager\IDMan.exe
- %PROGRAM_FILES%\Internet Download manager\unins000.exe
- %TEMP%\RarSFX0\c.exe
- %TEMP%\RarSFX1\nircmd.exe
- %TEMP%\RarSFX0\IDMan.bat
- %TEMP%\RarSFX0\Finish.exe
- %TEMP%\RarSFX1\Finish.mp3
- %PROGRAM_FILES%\Internet Download manager\unins000.dat
- %PROGRAM_FILES%\Internet Download manager\key.reg
- %TEMP%\RarSFX1\finish.bat
- %PROGRAM_FILES%\Internet Download manager\unins000.exe
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'