Техническая информация
- '%PROGRAM_FILES%\1108.exe'
- '<SYSTEM32>\msiexec.exe' /i "%PROGRAM_FILES%\1.msi"
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\msiexec.exe' -Embedding 56E9C086714D57B13CDCA1290E17C242
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\bd.jse"
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\RealOne\361\local.jse"
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\RealOne\361\install.jse"
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\RealOne\361\hexbin.jse"
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\RealOne\361\schedule.jse"
- %PROGRAM_FILES%\1.msi
- %TEMP%\49b61.msi
- %PROGRAM_FILES%\1108.exe
- %PROGRAM_FILES%\bd.jse
- %WINDIR%\Installer\MSI2.tmp
- %TEMP%\MSI49b62.LOG
- %WINDIR%\Installer\4a6ac.msi
- %WINDIR%\Installer\MSI1.tmp
- %PROGRAM_FILES%\Microsoft\hexa.nt
- %PROGRAM_FILES%\RealOne\361\local.jse
- %PROGRAM_FILES%\RealOne\361\schedule.jse
- %PROGRAM_FILES%\RealOne\361\game.ico
- %PROGRAM_FILES%\RealOne\361\tao.ico
- %PROGRAM_FILES%\RealOne\361\accwiz.exe
- %PROGRAM_FILES%\RealOne\361\actmovie.dll
- %PROGRAM_FILES%\RealOne\361\hexbin.jse
- %PROGRAM_FILES%\RealOne\361\install.jse
- %PROGRAM_FILES%\RealOne\361\hexbin.jse
- %WINDIR%\Installer\MSI1.tmp
- %WINDIR%\Installer\MSI2.tmp
- <SYSTEM32>\PerfStringBackup.TMP
- %PROGRAM_FILES%\RealOne\361\install.jse
- %PROGRAM_FILES%\1108.exe
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''