Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- %TEMP%\VSD1.tmp\dotnetfx\dotnetchk.exe
- %TEMP%\VSD1.tmp\install.log
- %TEMP%\IXP000.TMP\Setup.exe
- %TEMP%\IXP000.TMP\DevicescapeSetup.msi
- %TEMP%\MSI4.tmp
- %TEMP%\MSI2.tmp
- 'csc3-2004-crl.verisign.com':80
- 'crl.verisign.com':80
- 'wp#d':80
- http://CSC3-2004-crl.verisign.com/CSC3-2004.crl via csc3-2004-crl.verisign.com
- http://crl.verisign.com/pca3.crl
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK csc3-2004-crl.verisign.com
- DNS ASK crl.verisign.com
- DNS ASK wp#d
- '%TEMP%\VSD1.tmp\dotnetfx\dotnetchk.exe'
- '%TEMP%\IXP000.TMP\Setup.exe'
- '<SYSTEM32>\msiexec.exe' -Embedding 4D03F815A8B63CCE995C565151246EF1 C
- '<SYSTEM32>\msiexec.exe' /V