Technical Information
- %TEMP%\is-va4vf.tmp\is-n8j51.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-9pm2n.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-m1p5p.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-ffvub.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-g4u7e.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-99bs5.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-5p780.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-dlboc.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-ovkkg.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-5p4ke.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-lieka.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-hqal2.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-0pgv2.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-58m49.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-c70a5.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-oqrg9.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-6lsot.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-l8o8e.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-307ee.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-1jo5k.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-edbno.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-jbl9m.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-npjnm.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-fbt2u.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-mj9lc.tmp
- %ProgramFiles(x86)%\smart turn off\is-dm5kp.tmp
- %ProgramFiles(x86)%\smart turn off\is-k5b23.tmp
- %ProgramFiles(x86)%\smart turn off\unins000.dat
- %ProgramFiles(x86)%\smart turn off\skins\is-h3f2i.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-9sjb8.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-ie5pv.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-pvenb.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-bgris.tmp
- %TEMP%\is-to677.tmp\_isetup\_setup64.tmp
- %TEMP%\is-to677.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-to677.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\smart turn off\is-rjndi.tmp
- %ProgramFiles(x86)%\smart turn off\is-722ri.tmp
- %ProgramFiles(x86)%\smart turn off\is-mnf8q.tmp
- %ProgramFiles(x86)%\smart turn off\is-3llfa.tmp
- %ProgramFiles(x86)%\smart turn off\is-dp54v.tmp
- %ProgramFiles(x86)%\smart turn off\is-96erg.tmp
- %ProgramFiles(x86)%\smart turn off\is-86fvf.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-8lgjh.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-5j2p2.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-vcgqu.tmp
- %TEMP%\is-to677.tmp\_isetup\_regdll.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-blv3m.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-6p20j.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-gopbl.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-367e8.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-q6kjc.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-mr06b.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-ctj3c.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-p0mbs.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-pu6ah.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-cjs91.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-fogrs.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-1b1ta.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-3rhkq.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-k9cre.tmp
- %ProgramFiles(x86)%\smart turn off\skins\is-svmbk.tmp
- %ProgramFiles(x86)%\smart turn off\smartturnoff.exe
- %TEMP%\version.txt
- from %ProgramFiles(x86)%\smart turn off\is-rjndi.tmp to %ProgramFiles(x86)%\smart turn off\unins000.exe
- from %ProgramFiles(x86)%\smart turn off\skins\is-m1p5p.tmp to %ProgramFiles(x86)%\smart turn off\skins\office12style.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-ffvub.tmp to %ProgramFiles(x86)%\smart turn off\skins\office2003.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-g4u7e.tmp to %ProgramFiles(x86)%\smart turn off\skins\office2007 black.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-99bs5.tmp to %ProgramFiles(x86)%\smart turn off\skins\office2007 blue.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-5p780.tmp to %ProgramFiles(x86)%\smart turn off\skins\opus.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-dlboc.tmp to %ProgramFiles(x86)%\smart turn off\skins\pulsar.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-ovkkg.tmp to %ProgramFiles(x86)%\smart turn off\skins\retro.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-5p4ke.tmp to %ProgramFiles(x86)%\smart turn off\skins\rhombus.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-lieka.tmp to %ProgramFiles(x86)%\smart turn off\skins\sand.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-hqal2.tmp to %ProgramFiles(x86)%\smart turn off\skins\soapsky - blue.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-c70a5.tmp to %ProgramFiles(x86)%\smart turn off\skins\nextalpha.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-9pm2n.tmp to %ProgramFiles(x86)%\smart turn off\skins\nextalpha2.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-0pgv2.tmp to %ProgramFiles(x86)%\smart turn off\skins\soapsky - lime.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-9sjb8.tmp to %ProgramFiles(x86)%\smart turn off\skins\thefrog.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-6lsot.tmp to %ProgramFiles(x86)%\smart turn off\skins\vista.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-l8o8e.tmp to %ProgramFiles(x86)%\smart turn off\skins\winter2003.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-307ee.tmp to %ProgramFiles(x86)%\smart turn off\skins\wlm.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-1jo5k.tmp to %ProgramFiles(x86)%\smart turn off\skins\wmp 2008.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-edbno.tmp to %ProgramFiles(x86)%\smart turn off\skins\wmp11.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-jbl9m.tmp to %ProgramFiles(x86)%\smart turn off\skins\wood.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-npjnm.tmp to %ProgramFiles(x86)%\smart turn off\skins\xpluna.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-fbt2u.tmp to %ProgramFiles(x86)%\smart turn off\skins\xpsilver.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-mj9lc.tmp to %ProgramFiles(x86)%\smart turn off\skins\skins.txt
- from %ProgramFiles(x86)%\smart turn off\skins\is-oqrg9.tmp to %ProgramFiles(x86)%\smart turn off\skins\steam.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-h3f2i.tmp to %ProgramFiles(x86)%\smart turn off\skins\terminal4bit.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-58m49.tmp to %ProgramFiles(x86)%\smart turn off\skins\neutral4.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-ie5pv.tmp to %ProgramFiles(x86)%\smart turn off\skins\neutral3.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-pvenb.tmp to %ProgramFiles(x86)%\smart turn off\skins\neutral2.asz
- from %ProgramFiles(x86)%\smart turn off\is-mnf8q.tmp to %ProgramFiles(x86)%\smart turn off\smtimer.exe
- from %ProgramFiles(x86)%\smart turn off\is-3llfa.tmp to %ProgramFiles(x86)%\smart turn off\smlooka.exe
- from %ProgramFiles(x86)%\smart turn off\is-dp54v.tmp to %ProgramFiles(x86)%\smart turn off\turbosearch.exe
- from %ProgramFiles(x86)%\smart turn off\is-96erg.tmp to %ProgramFiles(x86)%\smart turn off\wizard.dll
- from %ProgramFiles(x86)%\smart turn off\is-86fvf.tmp to %ProgramFiles(x86)%\smart turn off\sm_uninst.exe
- from %ProgramFiles(x86)%\smart turn off\skins\is-8lgjh.tmp to %ProgramFiles(x86)%\smart turn off\skins\bluegauze.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-5j2p2.tmp to %ProgramFiles(x86)%\smart turn off\skins\blueglass.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-vcgqu.tmp to %ProgramFiles(x86)%\smart turn off\skins\blueice.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-blv3m.tmp to %ProgramFiles(x86)%\smart turn off\skins\blueplastic.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-svmbk.tmp to %ProgramFiles(x86)%\smart turn off\skins\cappuccino.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-6p20j.tmp to %ProgramFiles(x86)%\smart turn off\skins\cold.asz
- from %ProgramFiles(x86)%\smart turn off\is-722ri.tmp to %ProgramFiles(x86)%\smart turn off\smartturnoff.exe
- from %ProgramFiles(x86)%\smart turn off\skins\is-gopbl.tmp to %ProgramFiles(x86)%\smart turn off\skins\darkglass.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-q6kjc.tmp to %ProgramFiles(x86)%\smart turn off\skins\falloutstyle.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-mr06b.tmp to %ProgramFiles(x86)%\smart turn off\skins\golden.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-ctj3c.tmp to %ProgramFiles(x86)%\smart turn off\skins\grayplastic.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-p0mbs.tmp to %ProgramFiles(x86)%\smart turn off\skins\heroesstyle.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-pu6ah.tmp to %ProgramFiles(x86)%\smart turn off\skins\ledenets.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-cjs91.tmp to %ProgramFiles(x86)%\smart turn off\skins\likeoperastyle.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-fogrs.tmp to %ProgramFiles(x86)%\smart turn off\skins\longhorn.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-1b1ta.tmp to %ProgramFiles(x86)%\smart turn off\skins\macmetal.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-3rhkq.tmp to %ProgramFiles(x86)%\smart turn off\skins\macos.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-k9cre.tmp to %ProgramFiles(x86)%\smart turn off\skins\macos2.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-bgris.tmp to %ProgramFiles(x86)%\smart turn off\skins\neutral.asz
- from %ProgramFiles(x86)%\smart turn off\skins\is-367e8.tmp to %ProgramFiles(x86)%\smart turn off\skins\desert.asz
- from %ProgramFiles(x86)%\smart turn off\is-dm5kp.tmp to %ProgramFiles(x86)%\smart turn off\info.txt
- from %ProgramFiles(x86)%\smart turn off\is-k5b23.tmp to %ProgramFiles(x86)%\smart turn off\help.chm
- 'jo####rdmust.sbs':80
- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?64########
- http://jo####rdmust.sbs/new/net_api
- DNS ASK jo####rdmust.sbs
- ClassName: 'WindowsRvTurnOffMaster224' WindowName: ''
- '%TEMP%\is-va4vf.tmp\is-n8j51.tmp' /SL4 $E0160 "<Full path to file>" 7491717 52736
- '%ProgramFiles(x86)%\smart turn off\smartturnoff.exe'
- '%ProgramFiles(x86)%\smart turn off\smartturnoff.exe' eb276c81170bf16893ee1fa90774a397
- '%WINDIR%\syswow64\net.exe' helpmsg 52
- '%WINDIR%\syswow64\net1.exe' helpmsg 52
- '%WINDIR%\syswow64\net.exe' pause SmartTurn0218
- '%WINDIR%\syswow64\net1.exe' pause SmartTurn0218