Техническая информация
- %TEMP%\versioninfo.exe /q http://ve#######eck.s3.amazonaws.com/version.exe %WINDIR%\version.exe
- %WINDIR%\version.exe
- %TEMP%\versioninfo.exe
- %TEMP%\CopySafeReader.exe
- %WINDIR%\version.exe (загружен из сети Интернет)
- <SYSTEM32>\cmd.exe /c ""%TEMP%\versioncheck.cmd" "
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\version[1].exe
- %WINDIR%\version.exe.tmp
- %TEMP%\CopySafeReader.exe
- %TEMP%\versioncheck.cmd
- %TEMP%\versioninfo.exe
- 've#######eck.s3.amazonaws.com':80
- ve#######eck.s3.amazonaws.com/version.exe
- DNS ASK ve#######eck.s3.amazonaws.com
- ClassName: 'Shell_TrayWnd' WindowName: ''