Technical Information
- '%WINDIR%\syswow64\taskkill.exe' /F /IM Update.exe /T
- %TEMP%\nsz75ee.tmp
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nsn7e1c.tmp
- %TEMP%\nsi7e4c.tmp\modern-header.bmp
- %TEMP%\nsi7e4c.tmp\system.dll
- %TEMP%\nsi7e4c.tmp\nsisdl.dll
- %TEMP%\nsi7e4c.tmp\execcmd.dll
- %TEMP%\nsi7e4c.tmp\killprocdll.dll
- http://ap#.#oulegu.com/uninstall.php?p=############################################
- DNS ASK ap#.#oulegu.com
- ClassName: '#32770' WindowName: ''
- ClassName: '' WindowName: ''
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Current directory>\
- '%WINDIR%\syswow64\cmd.exe' /C "taskkill" /F /IM Update.exe /T' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /C "taskkill" /F /IM Update.exe /T