Technical Information
- <Drive name for removable media>:\fix\client.exe
- <Drive name for removable media>:\split.avi
- %ALLUSERSPROFILE%\fix\split.ico
- %TEMP%\_gexm_ee.0.vb
- %TEMP%\_gexm_ee.cmdline
- %TEMP%\_gexm_ee.out
- %APPDATA%\svchost.exe
- <Drive name for removable media>:\fix\client.exe
- %TEMP%\_gexm_ee.cmdline
- %TEMP%\_gexm_ee.0.vb
- '21#.#.218.48':2325
- '%APPDATA%\svchost.exe'
- '%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\_gexm_ee.cmdline"' (with hidden window)
- '%WINDIR%\microsoft.net\framework64\v2.0.50727\vbc.exe' /noconfig @"%TEMP%\_gexm_ee.cmdline"