Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\scores] 'Start' = '00000002'
- '%TEMP%\nsf3.tmp\setup.exe' /S /A 00000
- '%PROGRAM_FILES%\PepperZip\PepperZip.exe' /A 00000
- '%WINDIR%\score.exe' /install /silent
- '%WINDIR%\score.exe'
- '<SYSTEM32>\regsvr32.exe' /s "%PROGRAM_FILES%\PepperZip\shell\PPZShellExtension.dll"
- %PROGRAM_FILES%\PepperZip\shell\PPZShellExtension.dll
- %PROGRAM_FILES%\PepperZip\shell\PPZShellExtension_x64.dll
- %HOMEPATH%\Desktop\PepperZip.lnk
- %PROGRAM_FILES%\PepperZip\pepperzip.dll
- %HOMEPATH%\Start Menu\Programs\PepperZip\Uninstall.lnk
- %PROGRAM_FILES%\PepperZip\uninst.exe
- %PROGRAM_FILES%\PepperZip\PepperZip.url
- %HOMEPATH%\Start Menu\Programs\PepperZip\Website.lnk
- %TEMP%\nsf3.tmp\setup.exe
- %WINDIR%\score.exe
- %TEMP%\nsf2.tmp
- %TEMP%\nsf3.tmp\score.exe
- %PROGRAM_FILES%\PepperZip\PepperZip.exe
- %HOMEPATH%\Start Menu\Programs\PepperZip\PepperZip.lnk
- %TEMP%\nsf3.tmp\SimpleSC.dll
- %TEMP%\nsy5.tmp
- %TEMP%\nsf3.tmp\SimpleSC.dll
- %TEMP%\nsf3.tmp\setup.exe
- %TEMP%\nsf3.tmp\score.exe
- 'in#####s.peperware.com':80
- in#####s.peperware.com/install/00000/C59C9399BFD2908C8999-0678-47ED-9C93-27B32D5984EC
- DNS ASK in#####s.peperware.com