Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- '%TEMP%\ACSETUP.tmp\setup.exe'
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' -Embedding A7C7B738C04D57A4CFC0039FDFD7FCAA C
- '<SYSTEM32>\msiexec.exe' -I "%TEMP%\ACSETUP.tmp\plmhdrprogconfig.msi"
- '<SYSTEM32>\cmd.exe' /c %TEMP%\IXP000.TMP\install.cmd
- '<SYSTEM32>\xcopy.exe' . %TEMP%\ACSETUP.tmp /S /E /Y
- %TEMP%\30fb1.msi
- %TEMP%\VSD1.tmp\install.log
- %TEMP%\MSI2.tmp
- %TEMP%\MSI4.tmp
- %TEMP%\CFG3.tmp
- %TEMP%\ACSETUP.tmp\setup.exe
- %TEMP%\IXP000.TMP\setup.exe
- %TEMP%\IXP000.TMP\plmhdrprogconfig.msi
- %TEMP%\IXP000.TMP\install.cmd
- %TEMP%\ACSETUP.tmp\plmhdrprogconfig.msi
- %TEMP%\ACSETUP.tmp\install.cmd
- %TEMP%\MSI2.tmp
- %TEMP%\MSI4.tmp
- %TEMP%\IXP000.TMP\plmhdrprogconfig.msi
- %TEMP%\IXP000.TMP\install.cmd
- %TEMP%\IXP000.TMP\setup.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'