Trojan.Encoder.36864

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%APPDATA%\microsoft\windows\start menu\programs\startup\fictnytkfqtt.exe

Creates the following files on removable media

<Drive name for removable media>:\correct.avi
<Drive name for removable media>:\sdksampleprivdeveloper.cer
<Drive name for removable media>:\tileimage.bmp.exe
<Drive name for removable media>:\contosoroot.cer
<Drive name for removable media>:\testcertificate.cer.exe
<Drive name for removable media>:\pmd.cer
<Drive name for removable media>:\dashborder_192.bmp.exe
<Drive name for removable media>:\contoso_1.cer.exe
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\testee.cer.exe
<Drive name for removable media>:\weeklysheet1215.doc
<Drive name for removable media>:\contosoroot.cer.exe
<Drive name for removable media>:\lisp_success.doc.exe
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\sdksampleprivdeveloper.cer.exe
<Drive name for removable media>:\hanni_umami_chapter.doc
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc.exe
<Drive name for removable media>:\hadac_newsletter_july_2010_final.docx
<Drive name for removable media>:\sdksampleunprivdeveloper.cer.exe
<Drive name for removable media>:\sdszfo.docx
<Drive name for removable media>:\holycrosschurchinstructions.docx
<Drive name for removable media>:\aoc_saq_d_v3_merchant.docx
<Drive name for removable media>:\glidescope_review_rev_010.docx
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\lisp_success.doc
<Drive name for removable media>:\toolbar.bmp.exe
<Drive name for removable media>:\dashborder_120.bmp.exe
<Drive name for removable media>:\yrtlckuhbu\wbenjshakk.exe
<Drive name for removable media>:\delete.avi
<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\join.avi
<Drive name for removable media>:\dashborder_144.bmp
<Drive name for removable media>:\delete.avi.exe
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\join.avi.exe
<Drive name for removable media>:\correct.avi.exe
<Drive name for removable media>:\000814251_video_01.avi.exe
<Drive name for removable media>:\coffee.bmp.exe
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\tileimage.bmp
<Drive name for removable media>:\dial.bmp.exe
<Drive name for removable media>:\dashborder_144.bmp.exe
<Drive name for removable media>:\dialmap.bmp.exe
<Drive name for removable media>:\toolbar.bmp
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\coffee.bmp
<Drive name for removable media>:\testee.cer
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\hanni_umami_chapter.doc.exe

Malicious functions

Injects code into

the following system processes:

%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe

Modifies file system

Creates the following files

%ALLUSERSPROFILE%\ylrkcvmoat\ylrkcvmoat.ico
%TEMP%\~temp1311204.tmp
%ALLUSERSPROFILE%\raxbwulbao\508softwareandos.doc.ico
%TEMP%\rcxff64.tmp
%ALLUSERSPROFILE%\raxbwulbao\eeelfffstt
%ALLUSERSPROFILE%\raxbwulbao\lisp_success.doc.ico
%TEMP%\~temp1309815.tmp
%ALLUSERSPROFILE%\raxbwulbao\hntixwlsle
%TEMP%\rcxfa74.tmp
%ALLUSERSPROFILE%\raxbwulbao\weeklysheet1215.doc.ico
%TEMP%\~temp1308567.tmp
%ALLUSERSPROFILE%\raxbwulbao\kmieuyfpeg
%TEMP%\rcx28f.tmp
%ALLUSERSPROFILE%\raxbwulbao\uep_form_786_bulletin_1726i602.doc.ico
%ALLUSERSPROFILE%\raxbwulbao\lktjpclewc
%TEMP%\~temp1306102.tmp
%TEMP%\rcxedf6.tmp
%ALLUSERSPROFILE%\raxbwulbao\pmd.cer.ico
%TEMP%\rcxeaea.tmp
%TEMP%\~temp1305244.tmp
%ALLUSERSPROFILE%\raxbwulbao\xyhfqdkrmn
%ALLUSERSPROFILE%\raxbwulbao\contosoroot.cer.ico
%TEMP%\~temp1305135.tmp
%ALLUSERSPROFILE%\raxbwulbao\nbyfglmcoo
%TEMP%\rcxe56e.tmp
%TEMP%\rcxf288.tmp
%ALLUSERSPROFILE%\raxbwulbao\ucafoyigje
%ALLUSERSPROFILE%\raxbwulbao\hanni_umami_chapter.doc.ico
%TEMP%\~temp1312732.tmp
%TEMP%\rcx2dc4.tmp
%TEMP%\~temp1322342.tmp
%TEMP%\rcx2828.tmp
%TEMP%\rcx273e.tmp
%TEMP%\~temp1320610.tmp
%TEMP%\~temp1320127.tmp
%TEMP%\rcx2404.tmp
%TEMP%\rcx22ac.tmp
%TEMP%\~temp1319425.tmp
%TEMP%\~temp1319362.tmp
%TEMP%\~temp1318879.tmp
%ALLUSERSPROFILE%\raxbwulbao\mhkhmmnnnn
%ALLUSERSPROFILE%\raxbwulbao\glidescope_review_rev_010.docx.ico
%ALLUSERSPROFILE%\raxbwulbao\eieqiemprr
%ALLUSERSPROFILE%\raxbwulbao\aoc_saq_d_v3_merchant.docx.ico
%ALLUSERSPROFILE%\raxbwulbao\qogmvcwkps
%ALLUSERSPROFILE%\raxbwulbao\holycrosschurchinstructions.docx.ico
%ALLUSERSPROFILE%\raxbwulbao\rgnbnklshx
%ALLUSERSPROFILE%\raxbwulbao\sdszfo.docx.ico
%ALLUSERSPROFILE%\raxbwulbao\fepmidrmnt
%TEMP%\rcxd39.tmp
%ALLUSERSPROFILE%\raxbwulbao\hadac_newsletter_july_2010_final.docx.ico
%TEMP%\rcxc20.tmp
%TEMP%\~temp1312857.tmp
%ALLUSERSPROFILE%\raxbwulbao\bbphlbafxm
%ALLUSERSPROFILE%\raxbwulbao\sdksampleprivdeveloper.cer.ico
%TEMP%\~temp1322436.tmp
%TEMP%\~temp1303232.tmp
%ALLUSERSPROFILE%\raxbwulbao\testcertificate.cer.ico
%TEMP%\rcx2af6.tmp
%TEMP%\~temp1254482.tmp
%TEMP%\rcx23e4.tmp
%TEMP%\~temp1254263.tmp
%TEMP%\rcx1831.tmp
%TEMP%\~temp1251346.tmp
%ALLUSERSPROFILE%\raxbwulbao\dial.bmp.ico
%ALLUSERSPROFILE%\raxbwulbao\myxkjnthll
%ALLUSERSPROFILE%\raxbwulbao\dashborder_120.bmp.ico
%TEMP%\rcx8e5.tmp
%TEMP%\~temp1247430.tmp
%TEMP%\~temp1256276.tmp
%ALLUSERSPROFILE%\raxbwulbao\ecxrseuqfk
%ALLUSERSPROFILE%\raxbwulbao\tlqkbmwchk
%ALLUSERSPROFILE%\raxbwulbao\join.avi.ico
%ALLUSERSPROFILE%\raxbwulbao\pqpeeexcje
%ALLUSERSPROFILE%\raxbwulbao\000814251_video_01.avi.ico
%ALLUSERSPROFILE%\raxbwulbao\ymnemnriof
%ALLUSERSPROFILE%\raxbwulbao\delete.avi.ico
%ALLUSERSPROFILE%\raxbwulbao\ibaktnrefs
%ALLUSERSPROFILE%\raxbwulbao\correct.avi.ico
%ALLUSERSPROFILE%\raxbwulbao\tkmxqmsiry
%ALLUSERSPROFILE%\raxbwulbao\raxbwulbao.ico
%ALLUSERSPROFILE%\ylrkcvmoat\buahufaoxe
%ALLUSERSPROFILE%\raxbwulbao\dashborder_144.bmp.ico
%ALLUSERSPROFILE%\raxbwulbao\xnwvunghcy
%TEMP%\rcx3c35.tmp
%ALLUSERSPROFILE%\raxbwulbao\dialmap.bmp.ico
%ALLUSERSPROFILE%\raxbwulbao\gvguhkumaa
%TEMP%\rcxdd34.tmp
%ALLUSERSPROFILE%\raxbwulbao\sdksampleunprivdeveloper.cer.ico
%TEMP%\rcxdaa5.tmp
%TEMP%\~temp1301126.tmp
%TEMP%\~temp1300315.tmp
%ALLUSERSPROFILE%\raxbwulbao\ttjgbdihou
%ALLUSERSPROFILE%\raxbwulbao\contoso_1.cer.ico
%ALLUSERSPROFILE%\raxbwulbao\mulddrrqto
%ALLUSERSPROFILE%\raxbwulbao\testee.cer.ico
%ALLUSERSPROFILE%\raxbwulbao\vwodbfovee
%ALLUSERSPROFILE%\raxbwulbao\coffee.bmp.ico
%ALLUSERSPROFILE%\raxbwulbao\kebgqlkriv
%ALLUSERSPROFILE%\raxbwulbao\dashborder_192.bmp.ico
%ALLUSERSPROFILE%\raxbwulbao\vbukjurnpt
%ALLUSERSPROFILE%\raxbwulbao\toolbar.bmp.ico
%ALLUSERSPROFILE%\raxbwulbao\iseqqqikqs
%TEMP%\rcx9a7a.tmp
%TEMP%\rcx8fa1.tmp
%TEMP%\rcx8f25.tmp
%TEMP%\~temp1280596.tmp
%ALLUSERSPROFILE%\raxbwulbao\tileimage.bmp.ico
%ALLUSERSPROFILE%\raxbwulbao\bccivcbgrf
%TEMP%\~temp1275822.tmp
%TEMP%\~temp1275729.tmp
%ALLUSERSPROFILE%\raxbwulbao\vovgbhdqet
%TEMP%\~temp1322420.tmp

Sets the 'hidden' attribute to the following files

<Drive name for removable media>:\yrtlckuhbu\wbenjshakk.exe
%APPDATA%\microsoft\windows\start menu\programs\startup\fictnytkfqtt.exe

Deletes the following files

%TEMP%\~temp1318879.tmp

Moves the following files

from %TEMP%\rcx8e5.tmp to %TEMP%\~temp1247430.tmp
from %TEMP%\rcx273e.tmp to %TEMP%\~temp1320127.tmp
from %TEMP%\rcx2404.tmp to %TEMP%\~temp1319425.tmp
from %TEMP%\rcx22ac.tmp to %TEMP%\~temp1319362.tmp
from %TEMP%\rcxd39.tmp to %TEMP%\~temp1312857.tmp
from %TEMP%\rcxc20.tmp to %TEMP%\~temp1312732.tmp
from %TEMP%\rcx28f.tmp to %TEMP%\~temp1311204.tmp
from %TEMP%\rcxff64.tmp to %TEMP%\~temp1309815.tmp
from %TEMP%\rcxfa74.tmp to %TEMP%\~temp1308567.tmp
from %TEMP%\rcxf288.tmp to %TEMP%\~temp1306102.tmp
from %TEMP%\rcxedf6.tmp to %TEMP%\~temp1305244.tmp
from %TEMP%\rcxeaea.tmp to %TEMP%\~temp1305135.tmp
from %TEMP%\rcxe56e.tmp to %TEMP%\~temp1303232.tmp
from %TEMP%\rcxdd34.tmp to %TEMP%\~temp1301126.tmp
from %TEMP%\rcxdaa5.tmp to %TEMP%\~temp1300315.tmp
from %TEMP%\rcx9a7a.tmp to %TEMP%\~temp1280596.tmp
from %TEMP%\rcx8fa1.tmp to %TEMP%\~temp1275729.tmp
from %TEMP%\rcx8f25.tmp to %TEMP%\~temp1275822.tmp
from %TEMP%\rcx3c35.tmp to %TEMP%\~temp1256276.tmp
from %TEMP%\rcx2af6.tmp to %TEMP%\~temp1254482.tmp
from %TEMP%\rcx23e4.tmp to %TEMP%\~temp1254263.tmp
from %TEMP%\rcx1831.tmp to %TEMP%\~temp1251346.tmp
from %TEMP%\rcx2828.tmp to %TEMP%\~temp1320610.tmp
from %TEMP%\rcx2dc4.tmp to %TEMP%\~temp1322342.tmp

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'za#####1.duckdns.org':6869
'pa###bin.com':443
'microsoft.com':80
'45.##.186.52':6869

TCP

HTTP GET requests

http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt

Other

'pa###bin.com':443

UDP

DNS ASK za#####1.duckdns.org
DNS ASK pa###bin.com
DNS ASK microsoft.com

Miscellaneous

Executes the following

'%WINDIR%\syswow64\dllhost.exe'
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\qogmvcwkps" /out "<Drive name for removable media>:\holycrosschurchinstructions.docx.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\holycrosschurchinstructions.docx....
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\rgnbnklshx" /out "<Drive name for removable media>:\sdszfo.docx.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\sdszfo.docx.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tk...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\fepmidrmnt" /out "<Drive name for removable media>:\hadac_newsletter_july_2010_final.docx.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\hadac_newsletter_july_2010_f...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\bbphlbafxm" /out "<Drive name for removable media>:\hanni_umami_chapter.doc.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\hanni_umami_chapter.doc.ico" /bin "%ALLUSE...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\ucafoyigje" /out "<Drive name for removable media>:\508softwareandos.doc.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\508softwareandos.doc.ico" /bin "%ALLUSERSPROF...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\eeelfffstt" /out "<Drive name for removable media>:\lisp_success.doc.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\lisp_success.doc.ico" /bin "%ALLUSERSPROFILE%\rax...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\hntixwlsle" /out "<Drive name for removable media>:\weeklysheet1215.doc.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\weeklysheet1215.doc.ico" /bin "%ALLUSERSPROFIL...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\kmieuyfpeg" /out "<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\uep_form_786_bulletin_1726i602....
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\lktjpclewc" /out "<Drive name for removable media>:\pmd.cer.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\pmd.cer.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tkmxqmsiry...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\xyhfqdkrmn" /out "<Drive name for removable media>:\contosoroot.cer.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\contosoroot.cer.ico" /bin "%ALLUSERSPROFILE%\raxbw...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\nbyfglmcoo" /out "<Drive name for removable media>:\SDKSamplePrivDeveloper.cer.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\SDKSamplePrivDeveloper.cer.ico" /bin "%...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\vovgbhdqet" /out "<Drive name for removable media>:\TestCertificate.cer.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\TestCertificate.cer.ico" /bin "%ALLUSERSPROFIL...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\gvguhkumaa" /out "<Drive name for removable media>:\SDKSampleUnprivDeveloper.cer.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\SDKSampleUnprivDeveloper.cer.ico" /bi...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\ttjgbdihou" /out "<Drive name for removable media>:\contoso_1.cer.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\contoso_1.cer.ico" /bin "%ALLUSERSPROFILE%\raxbwulba...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\mulddrrqto" /out "<Drive name for removable media>:\testEE.cer.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\testEE.cer.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tkmx...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\vwodbfovee" /out "<Drive name for removable media>:\coffee.bmp.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\coffee.bmp.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tkmx...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\vbukjurnpt" /out "<Drive name for removable media>:\toolbar.bmp.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\toolbar.bmp.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tk...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\kebgqlkriv" /out "<Drive name for removable media>:\dashBorder_192.bmp.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\dashBorder_192.bmp.ico" /bin "%ALLUSERSPROFILE%...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\iseqqqikqs" /out "<Drive name for removable media>:\tileimage.bmp.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\tileimage.bmp.ico" /bin "%ALLUSERSPROFILE%\raxbwulba...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\bccivcbgrf" /out "<Drive name for removable media>:\dialmap.bmp.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\dialmap.bmp.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tk...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\xnwvunghcy" /out "<Drive name for removable media>:\dial.bmp.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\dial.bmp.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tkmxqmsi...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\myxkjnthll" /out "<Drive name for removable media>:\dashBorder_120.bmp.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\dashBorder_120.bmp.ico" /bin "%ALLUSERSPROFILE%...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\ecxrseuqfk" /out "<Drive name for removable media>:\dashBorder_144.bmp.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\dashBorder_144.bmp.ico" /bin "%ALLUSERSPROFILE%...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\tlqkbmwchk" /out "<Drive name for removable media>:\join.avi.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\join.avi.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tkmxqmsi...
'%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\pqpeeexcje" /out "<Drive name for removable media>:\000814251_video_01.avi.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\000814251_video_01.avi.ico" /bin "%ALLUSERS...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\ymnemnriof" /out "<Drive name for removable media>:\delete.avi.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\delete.avi.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tkmx...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\ibaktnrefs" /out "<Drive name for removable media>:\correct.avi.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\correct.avi.ico" /bin "%ALLUSERSPROFILE%\raxbwulbao\tk...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\eieqiemprr" /out "<Drive name for removable media>:\aoc_saq_d_v3_merchant.docx.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\aoc_saq_d_v3_merchant.docx.ico" /bin "%...
'%WINDIR%\microsoft.net\framework\v2.0.50727\applaunch.exe' /in "%ALLUSERSPROFILE%\raxbwulbao\mhkhmmnnnn" /out "<Drive name for removable media>:\glidescope_review_rev_010.docx.exe" /icon "%ALLUSERSPROFILE%\raxbwulbao\glidescope_review_rev_010.docx.ico"...

Технології

Терміни

Навчання

Міфи

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней