Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '<File name>.uni' = '%WINDIR%\zipexe_r.exe REMOVE "%WINDIR%\TEMP\<File name>\"'
- %WINDIR%\Temp\<File name>\<File name>.exe
- %WINDIR%\Temp\<File name>\ZIPEXE.EXE
- %WINDIR%\Temp\<File name>\uztemp.zip
- %WINDIR%\zipexe_r.exe
- %WINDIR%\Temp\<File name>\360JJ2C0-1.bin
- %WINDIR%\Temp\<File name>\360JJ2C0-2.bin
- %WINDIR%\Temp\<File name>\CONFIG.TXT
- %WINDIR%\Temp\<File name>\Upgrade.exe
- %WINDIR%\Temp\<File name>\uztemp.zip
- %WINDIR%\Temp\<File name>\<File name>.exe
- '%WINDIR%\Temp\<File name>\ZIPEXE.EXE' 123 "<File name>.exe"
- '%WINDIR%\Temp\<File name>\Upgrade.exe'