Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Updater' = '%TEMP%\dlc86.exe'
- '%TEMP%\is-S3JNI.tmp\setup.tmp' /SL5="$100E8,140800,0,<Current directory>\setup.exe"
- '<Current directory>\setup.exe'
- '%TEMP%\_ir_sf_temp_0\irsetup.exe' __IRAOFF:4221698 "__IRAFN:<Full path to file>" "__IRCT:1" "__IRTSS:0" "__IRSID:S-1-5-21-2052111302-484763869-725345543-1003"
- <Current directory>\setup.exe
- %TEMP%\is-S3JNI.tmp\setup.tmp
- %TEMP%\is-PMMKF.tmp\_isetup\_shfoldr.dll
- %TEMP%\_ir_sf_temp_0\irsetup.exe
- %TEMP%\_ir_sf_temp_0\lua5.1.dll
- %TEMP%\_ir_sf_temp_0\irsetup.dat
- <Current directory>\setup.exe
- %TEMP%\_ir_sf_temp_0\lua5.1.dll
- %TEMP%\_ir_sf_temp_0\irsetup.exe
- %TEMP%\_ir_sf_temp_0\irsetup.dat
- 'cy##o.gdn':80
- http://cy##o.gdn/nm/gp.php
- DNS ASK cy##o.gdn
- ClassName: 'MS_WINHELP' WindowName: ''