Technical Information
- [<HKCU>\software\microsoft\windows\currentversion\RunOnce] 'WMozillaThunderbird' = '%APPDATA%\WMozillaThunderbird\WMozillaThunderbird.exe'
- %TEMP%\55504e58.tmp
- %TEMP%\326b6f31.tmp
- %TEMP%\42347050.tmp
- %TEMP%\6e353050.tmp
- %TEMP%\71503567.tmp
- %TEMP%\67326852.tmp
- %TEMP%\e31.tmp
- %TEMP%\1369.tmp
- %APPDATA%\wmozillathunderbird\wmozillathunderbird.exe