Техническая информация
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:"%TEMP%\RES2.tmp"" "%TEMP%\CSC1.tmp"
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\csc.exe /noconfig /fullpaths @"%TEMP%\zfguh1uw.cmdline"
- %TEMP%\zfguh1uw.dll
- %TEMP%\RES2.tmp
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217
- %TEMP%\zfguh1uw.cmdline
- %TEMP%\zfguh1uw.0.cs
- %TEMP%\CSC1.tmp
- %TEMP%\zfguh1uw.out
- %TEMP%\zfguh1uw.0.cs
- %TEMP%\zfguh1uw.out
- %TEMP%\zfguh1uw.dll
- %TEMP%\RES2.tmp
- %TEMP%\CSC1.tmp
- %TEMP%\zfguh1uw.cmdline
- '20#.#6.232.182':80
- 20#.#6.232.182/pki/crl/products/WindowsPCA.crl
- DNS ASK crl.microsoft.com
- DNS ASK us######09a9c02.localdomain
- DNS ASK 1.###.##8.192.in-addr.arpa
- ClassName: 'Shell_TrayWnd' WindowName: ''