Technical Information
- %APPDATA%\folder\changelogfmz
- %ALLUSERSPROFILE%\folder\changelogfmz
- %ProgramFiles(x86)%\ilexperfectqwmsoft\ilexperfectsoftrtm.exe
- %APPDATA%\folder\changelogfmz
- %ALLUSERSPROFILE%\folder\changelogfmz
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK ho#####ftwareclub.com
- DNS ASK microsoft.com
- ClassName: '#32770' WindowName: ''
- '%ProgramFiles(x86)%\ilexperfectqwmsoft\ilexperfectsoftrtm.exe'
- '%WINDIR%\syswow64\cmd.exe' /d /c timeout 5 & cmd /d /c del /f /q "<Full path to file>"' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /d /c timeout 5 & cmd /d /c del /f /q "<Full path to file>"
- '%WINDIR%\syswow64\timeout.exe' 5
- '%WINDIR%\syswow64\cmd.exe' /d /c del /f /q "<Full path to file>"