Technical Information
- '%TEMP%\Settings\Update.exe' /verysilent
- '%TEMP%\Settings\GoogleUpdate.exe' /verysilent
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\Settings\KillDuplicate.cmd" "%TEMP%\Settings" "<File name>.exe""
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
- %TEMP%\Settings\Update.exe
- %APPDATA%\GoogleUpdate.exe
- %TEMP%\Settings\KillDuplicate.cmd
- %TEMP%\Settings\GoogleUpdate.exe
- %TEMP%\Settings\GoogleUpdate.exe
- %TEMP%\Settings\KillDuplicate.cmd
- 'mi#####fts.myftp.biz':3399
- DNS ASK mi#####fts.myftp.biz
- ClassName: 'Shell_TrayWnd' WindowName: ''