Technical Information
- %TEMP%\is-D79LI.tmp\Green.tmp /SL5="$10130,744479,52224,%PROGRAM_FILES%\soft04\Green.exe" /sp- /VERYSILENT /norestart
- %TEMP%\is-DEG8P.tmp\Green.tmp /SL5="$300DA,744479,52224,%PROGRAM_FILES%\soft04\Green.exe"
- %PROGRAM_FILES%\soft04\Green.exe /sp- /VERYSILENT /norestart
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://jy.#144.net/
- %TEMP%\is-KDABT.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-KDABT.tmp\_isetup\_shfoldr.dll
- %TEMP%\nsn2.tmp\NSISdl.dll
- %TEMP%\is-D79LI.tmp\Green.tmp
- %PROGRAM_FILES%\soft04\Green.exe
- %PROGRAM_FILES%\soft04\a
- %TEMP%\is-KDABT.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-DEG8P.tmp\Green.tmp
- %TEMP%\is-KDABT.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-DEG8P.tmp\Green.tmp
- %TEMP%\is-KDABT.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-KDABT.tmp\_isetup\_RegDLL.tmp
- DNS ASK do##.emoney.cn
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''