Technical Information
- %WINDIR%\Tasks\Update Assist.job
- %TEMP%\nst2.tmp
- %TEMP%\nsd3.tmp\System.dll
- %TEMP%\~msnsis\RunHelp.exe
- %TEMP%\~msnsis\ssMUIDLL.dll
- %TEMP%\~msnsis\ss.obj
- %ALLUSERSPROFILE%\SamSungHelp\RunHelp.exe
- %ALLUSERSPROFILE%\SamSungHelp\ss.obj
- %ALLUSERSPROFILE%\SamSungHelp\ssMUIDLL.dll
- %TEMP%\nsd3.tmp\System.dll
- %TEMP%\~msnsis\RunHelp.exe
- %TEMP%\~msnsis\ss.obj
- %TEMP%\~msnsis\ssMUIDLL.dll
- <Full path to file>
- '11#.#13.106.148':80
- '%TEMP%\~msnsis\RunHelp.exe'
- '%ALLUSERSPROFILE%\SamSungHelp\RunHelp.exe'
- '<SYSTEM32>\cmd.exe' /c ping 127.0.0.1&del "<Full path to file>"
- '<SYSTEM32>\ping.exe' 127.0.0.1
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 1 /tn "Update Assist" /tr "\"%ALLUSERSPROFILE%\SamSungHelp\RunHelp.exe\"" /ru "system"
- '<SYSTEM32>\nslookup.exe'