Техническая информация
- %APPDATA%\InstantSupport_Temp_Files\InstantSupportVNC.exe -kill
- <SYSTEM32>\wscript.exe "%APPDATA%\InstantSupport_Temp_Files\unblock.js"
- %TEMP%\aut6.tmp
- %APPDATA%\InstantSupport_Temp_Files\InstantSupportVNC.exe
- %TEMP%\aut5.tmp
- %APPDATA%\InstantSupport_Temp_Files\unblock.js
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %APPDATA%\InstantSupport_Temp_Files\InstantSupport.exe
- %APPDATA%\InstantSupport_Temp_Files\ultravnc.ini
- %TEMP%\aut2.tmp
- %APPDATA%\InstantSupport_Temp_Files\instantsupport.ini
- %TEMP%\aut1.tmp
- %APPDATA%\InstantSupport_Temp_Files\logo.jpg
- %TEMP%\aut4.tmp
- %APPDATA%\InstantSupport_Temp_Files\SecureVNCPlugin.dsm
- %TEMP%\aut3.tmp
- %APPDATA%\InstantSupport_Temp_Files\logo.jpg
- %APPDATA%\InstantSupport_Temp_Files\InstantSupportVNC.exe
- %APPDATA%\InstantSupport_Temp_Files\instantsupport.ini
- %APPDATA%\InstantSupport_Temp_Files\SecureVNCPlugin.dsm
- %TEMP%\~DF19DC.tmp
- %APPDATA%\InstantSupport_Temp_Files\unblock.js
- %APPDATA%\InstantSupport_Temp_Files\ultravnc.ini
- %TEMP%\aut3.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- %TEMP%\aut4.tmp
- %APPDATA%\InstantSupport_Temp_Files\InstantSupport.exe
- %TEMP%\aut6.tmp
- %TEMP%\aut5.tmp
- 'ca######.freeremotesupport.net':443
- DNS ASK ca######.freeremotesupport.net
- ClassName: 'WinVNC Tray Icon' WindowName: ''
- ClassName: 'BUTTON' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''