Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\SyncCenter.exe
- %HOMEPATH%\Start Menu\Programs\Startup\SyncCenter4.exe
- %TEMP%\aut1.tmp
- <LS_APPDATA>\SyncCenter.exe
- %TEMP%\aut2.tmp
- <LS_APPDATA>\SyncCenter4.exe
- %TEMP%\aut3.tmp
- %TEMP%\tamim.doc
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut3.tmp
- ClassName: 'WordPadClass' WindowName: ''
- '<SYSTEM32>\cmd.exe' /c %TEMP%\tamim.doc
- '<SYSTEM32>\cmd.exe' /c SCHTASKS /Create /f /SC minute /TN "SyncCenter" /mo 2 /tr "%userprofile%\appdata\local\SyncCenter.exe"
- '<SYSTEM32>\schtasks.exe' /Create /f /SC minute /TN "SyncCenter" /mo 2 /tr "%HOMEPATH%\appdata\local\SyncCenter.exe"
- '%ProgramFiles%\Windows NT\Accessories\wordpad.exe' "%TEMP%\tamim.doc"
- '<SYSTEM32>\cmd.exe' /c SCHTASKS /Create /f /SC minute /TN "SyncCenter4" /mo 2 /tr "%userprofile%\appdata\local\SyncCenter4.exe"
- '<SYSTEM32>\schtasks.exe' /Create /f /SC minute /TN "SyncCenter4" /mo 2 /tr "%HOMEPATH%\appdata\local\SyncCenter4.exe"