Technical Information
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut3.tmp
- %WINDIR%\D2_skin_Check.exe
- <Current directory>\D2_skin_UnInstall.exe
- %TEMP%\scratch.bat
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut3.tmp
- <Full path to file>
- 'kr##e.kr':80
- http://kr##e.kr/D2_skin_Check.exe
- http://kr##e.kr/D2_skin_UnInstall.exe
- DNS ASK kr##e.kr
- '<SYSTEM32>\cmd.exe' /c schtasks.exe /delete /tn D2_skin_Update_Check /f
- '<SYSTEM32>\cmd.exe' /c schtasks.exe /create /tn D2_skin_Update_Check /tr %WINDIR%\D2_skin_Check.exe /sc hourly /mo 8
- '<SYSTEM32>\schtasks.exe' /delete /tn D2_skin_Update_Check /f
- '<SYSTEM32>\schtasks.exe' /create /tn D2_skin_Update_Check /tr %WINDIR%\D2_skin_Check.exe /sc hourly /mo 8
- '<SYSTEM32>\cmd.exe' /c %TEMP%\scratch.bat
- '<SYSTEM32>\ping.exe' -n 0127.0.0.1