Technical Information
- %TEMP%\KB2535512-x86-CHS.exe /quiet /norestart
- %PROGRAM_FILES%\thunder7.exe
- %TEMP%\KB2535512-x86-CHS.exe (downloaded from the Internet)
- %WINDIR%\vbcfg.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\KB2535512-x86-CHS[1].rar
- %TEMP%\KB2535512-x86-CHS.exe
- <SYSTEM32>\qCMpWL.pic
- %TEMP%\nsx2.tmp
- %PROGRAM_FILES%\thunder7.exe
- %TEMP%\nsr3.tmp\System.dll
- %PROGRAM_FILES%\thunder7.exe
- %TEMP%\nsr3.tmp\System.dll
- 'wo##.vicp.hk':80
- 'localhost':1035
- wo##.vicp.hk/KB2535512-x86-CHS.rar
- DNS ASK wo##.vicp.hk