Техническая информация
- '%TEMP%\f.exe' /PID=100 /SUBPID=0 /NETWORKID=1 /DISTID=113 /CID=0 /PRODUCT_ID=1221 /SERVER_URL=http://in######r.apps-track.com /CLICKID=87823 /D1=1 /D2=2 /D3=3 /D4=4 /D5=5 /PRODUCT_PRIVACY=http://www.pe##on.com/privacy-policy /PRODUCT_EULA=http://to#####.sweetpacks.com/eula /PRODUCT_NAME=dynamicamitname /EXE_URL=http://cd#.##download.com/Installer/DealPly/dp.exe /EXE_CMDLINE=/s /HOST_BROWSER=2 /THANKYOU_URL= /TIME=1404053394 /VM=2 /DS1=meir /IS_RUNTIME=true /RETURNING_USER_DAYS=2 /IS_DYNAMIC_ENCRYPTED=false
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\ob1hhelper.txt bios get version
- '<SYSTEM32>\wbem\wmic.exe' /output:%TEMP%\ob1hhelper.txt bios get serialnumber
- %TEMP%\tmp5.tmp
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- %TEMP%\ob1hhelper.txt
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- %TEMP%\tmp4.tmp
- %TEMP%\nsn2.tmp\Convert.dll
- %TEMP%\instructionsAVG3rs.dat
- %TEMP%\tmp3.tmp
- %TEMP%\f.exe
- %TEMP%\tmp5.tmp
- %TEMP%\ob1hhelper.txt
- %TEMP%\tmp4.tmp
- %TEMP%\instructionsAVG3rs.dat
- %TEMP%\tmp3.tmp
- 'in######r.apps-track.com':80
- DNS ASK in######r.apps-track.com