Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{727JJ3AG-388E-7O4I-4CB0-0IH3Y884QA8T}] 'StubPath' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HKCU' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'HKLM' = ''
- <SYSTEM32>\svchost.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:"%TEMP%\RES2.tmp"" ""%TEMP%\vbc1.tmp""
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe /noconfig @"%TEMP%\wcz23osh.cmdline"
- %TEMP%\RES2.tmp
- %TEMP%\wcz23osh.dll
- %WINDIR%\InstallDir\Server.exe
- %TEMP%\vbc1.tmp
- %TEMP%\wcz23osh.0.vb
- %TEMP%\wcz23osh.cmdline
- %TEMP%\wcz23osh.out
- %TEMP%\wcz23osh.dll
- %TEMP%\wcz23osh.out
- %TEMP%\wcz23osh.cmdline
- %TEMP%\RES2.tmp
- %TEMP%\vbc1.tmp
- %TEMP%\wcz23osh.0.vb
- 'iz###.no-ip.info':999
- DNS ASK iz###.no-ip.info
- ClassName: 'Indicator' WindowName: ''