Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\scores] 'Start' = '00000002'
- '%TEMP%\nsw3.tmp\setup.exe' /S /A 00000 /T 15
- '%PROGRAM_FILES%\PepperZip\PepperZip.exe' /A 00000 /T 15
- '%WINDIR%\score.exe' /install /silent
- '%WINDIR%\score.exe'
- '<SYSTEM32>\regsvr32.exe' /s "%PROGRAM_FILES%\PepperZip\shell\PPZShellExtension.dll"
- %PROGRAM_FILES%\PepperZip\shell\PPZShellExtension.dll
- %PROGRAM_FILES%\PepperZip\shell\PPZShellExtension_x64.dll
- %PROGRAM_FILES%\PepperZip\pepperzip.dll
- %TEMP%\nso6.tmp\System.dll
- %HOMEPATH%\Start Menu\Programs\PepperZip\Uninstall.lnk
- %PROGRAM_FILES%\PepperZip\uninst.exe
- %PROGRAM_FILES%\PepperZip\PepperZip.url
- %HOMEPATH%\Start Menu\Programs\PepperZip\Website.lnk
- %HOMEPATH%\Desktop\PepperZip.lnk
- %TEMP%\nsw3.tmp\setup.exe
- %WINDIR%\score.exe
- %TEMP%\nsw2.tmp
- %TEMP%\nsw3.tmp\score.exe
- %PROGRAM_FILES%\PepperZip\PepperZip.exe
- %HOMEPATH%\Start Menu\Programs\PepperZip\PepperZip.lnk
- %TEMP%\nsw3.tmp\SimpleSC.dll
- %TEMP%\nsc5.tmp
- %TEMP%\nsw3.tmp\setup.exe
- %TEMP%\nsw3.tmp\SimpleSC.dll
- %TEMP%\nso6.tmp\System.dll
- %TEMP%\nsw3.tmp\score.exe
- 'localhost':1040
- 'in#####s.peperware.com':80
- in#####s.peperware.com/install/00000/97364E12078A608E438D-CCE7-476A-9C20-1918920D2B9E
- DNS ASK in#####s.peperware.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''