Technical Information
- %WINDIR%\Tasks\MicrosoftQwery.job
- %TEMP%\7ZipSfx.001\mosaik.cmd
- %TEMP%\7ZipSfx.001\MosaikSetting.exe
- %WINDIR%\MicrosoftSetting\MicrosoftQwery.exe
- %TEMP%\7ZipSfx.000\install_mosaik.cmd
- %TEMP%\7ZipSfx.000\setting.ini
- '%WINDIR%\MicrosoftSetting\MicrosoftQwery.exe'
- '<SYSTEM32>\schtasks.exe' /Query /tn MicrosoftQwery
- '<SYSTEM32>\schtasks.exe' /Create /tn MicrosoftQwery /tr "%WINDIR%\MicrosoftSetting\MicrosoftQwery.exe" /sc MINUTE /mo 10 /ru "SYSTEM"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\7ZipSfx.001\mosaik.cmd" "
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\7ZipSfx.000\install_mosaik.cmd" "
- '<SYSTEM32>\cmd.exe' /S /D /c" ver "
- '<SYSTEM32>\find.exe' "Microsoft Windows XP"