Техническая информация
- '<SYSTEM32>\find.exe' /C /I "www.tu##-up.com/order" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "www.tu###up.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "www.re####ertuneup.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\attrib.exe' +r <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "www.tu##up.de" <DRIVERS>\etc\hosts
- '<SYSTEM32>\attrib.exe' -r <DRIVERS>\etc\hosts
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\chaytune.bat" "
- '<SYSTEM32>\find.exe' /C /I "forskippingurl" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "www.or###.tune-up.com" <DRIVERS>\etc\hosts
- '<SYSTEM32>\find.exe' /C /I "secure.tune-up.com" <DRIVERS>\etc\hosts
- %TEMP%\RarSFX0\key.exe
- %TEMP%\RarSFX0\chaytune.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''