Technical Information
- %TEMP%\nspb220.tmp
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nspb5c8.tmp
- %TEMP%\nseb5d8.tmp\system.dll
- %TEMP%\nseb5d8.tmp\userinfo.dll
- %TEMP%\nseb5d8.tmp\system.dll
- %TEMP%\nseb5d8.tmp\userinfo.dll
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Current directory>\
- '%WINDIR%\syswow64\regsvr32.exe' /s /u "<SYSTEM32>\CMSCOM.ocx"