Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{46C2BCE8-6FD3-4ab7-9D07-4DDEBF3B458D}] 'stubpath' = ''
- 'C:\server.exe'
- '<SYSTEM32>\msiexec.exe' -Embedding 275EB13C1827CF85E9A456E9D40FA432 C
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\msiexec.exe' /i "C:\hamachi.msi"
- '<SYSTEM32>\msiexec.exe' /V
- %TEMP%\3e11a.msi
- %PROGRAM_FILES%\pcrat services\invhwkmle.exe_lang.ini
- %PROGRAM_FILES%\pcrat services\invhwkmle.exe
- %TEMP%\MSI3.tmp
- %TEMP%\HamachiSetup.log
- %TEMP%\MSI2.tmp
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
- C:\server.exe
- C:\hamachi.msi
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\0797C381B2F87EB5A1D5573BD15BA4F4
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\0797C381B2F87EB5A1D5573BD15BA4F4
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\PerfStringBackup.TMP
- %TEMP%\MSI2.tmp
- %TEMP%\MSI3.tmp
- 'cs#######-2-crl.verisign.com':80
- 'crl.verisign.com':80
- 'wp#d':80
- cs#######-2-crl.verisign.com/CSC3-2009-2.crl
- crl.verisign.com/pca3.crl
- wp#d/wpad.dat
- DNS ASK cs#######-2-crl.verisign.com
- DNS ASK crl.verisign.com
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''