Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\svchost] 'Start' = '00000002'
- %WINDIR%\svupdate\sv\svchost.exe
- %WINDIR%\svupdate\svchost.exe
- %TEMP%\iniVTP.exe pasitobenito.no-ip.org ShareCash Downloader.exe
- %TEMP%\ivtp.exe
- <SYSTEM32>\sc.exe start svchost
- <SYSTEM32>\sc.exe create svchost binpath= "%WINDIR%\svupdate\sv\svchost.exe" type= own start= auto
- %WINDIR%\svupdate\svchost.exe
- %WINDIR%\svupdate\Infofile
- %WINDIR%\svupdate\CW\wget.exe
- %TEMP%\ivtp.exe
- %TEMP%\iniVTP.exe
- %WINDIR%\svupdate\sv\svchost.exe
- %TEMP%\Infofile
- 'us###.ugent.be':80
- 'wp#d':80
- 'pa#####enito.no-ip.org':4500
- us###.ugent.be/~bpuype/cgi-bin/fetch.pl?dl##############
- wp#d/wpad.dat
- DNS ASK us###.ugent.be
- DNS ASK wp#d
- DNS ASK pa#####enito.no-ip.org
- ClassName: 'Shell_TrayWnd' WindowName: ''