Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Pc Backup.lnk
- '%TEMP%\7zS0EBDD622\GenericSetup.exe'
- '%TEMP%\7zS0EBDD622\installer.exe'
- 'C:\ProgramData\wubackup\setup.exe'
- %TEMP%\7zS0EBDD622\installer.exe
- %TEMP%\7zS0EBDD622\DevLib.dll
- %TEMP%\7zS0EBDD622\Carrier.exe
- %TEMP%\7zS0EBDD622\GenericSetup.exe
- %TEMP%\7zS0EBDD622\Microsoft.Win32.TaskScheduler.dll
- %TEMP%\7zS0EBDD622\fr\DevLib.resources.dll
- %TEMP%\7zS0EBDD622\2017.12.03_01.35.07.250000_installer_pid=3076.txt
- %TEMP%\7zS0EBDD622\uTorrent.dll
- %TEMP%\7zS0EBDD622\WizardPages.dll
- %TEMP%\7zS0EBDD622\es\DevLib.resources.dll
- C:\ProgramData\wubackup\wcms.exe
- C:\ProgramData\wubackup\setup.exe
- C:\ProgramData\wubackup\Backup.ico
- C:\ProgramData\wubackup\config.json
- C:\ProgramData\wubackup\wubackup.exe
- %TEMP%\7zS0EBDD622\de\DevLib.resources.dll
- %TEMP%\7zS0EBDD622\en\DevLib.resources.dll
- %TEMP%\7zS0EBDD622\BundleConfig.xml
- %TEMP%\7zS0EBDD622\GenericSetup.exe.config
- 'so#.#daware.com':443
- 'so#.#daware.com':80
- 'fl##.#avasoft.com':443
- 'fl##.#avasoft.com':80
- 'wp#d':80
- http://11#.#11.111.2/wpad.dat via wp#d
- http://so#.#daware.com/v1/bundle/list/?bu############
- DNS ASK wp#d
- DNS ASK so#.#daware.com
- DNS ASK fl##.#avasoft.com
- DNS ASK www.google.com
- ClassName: 'EDIT' WindowName: ''