Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Winhlphost\Parameters] 'ServiceDll' = '<SYSTEM32>\Winhlphost.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\Winhlphost] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Winhlphost] 'ImagePath' = '<SYSTEM32>\svchost.exe -k LocalHostWin'
- '<SYSTEM32>\netsh.exe' firewall add portopening TCP 983 "adp"
- '<SYSTEM32>\netsh.exe' advfirewall firewall add rule name="POP3 Server" dir=in protocol=tcp localport=983 action=allow enable=yes
- <SYSTEM32>\Winhlphost.dll
- <Current directory>\intrace.bat
- <Full path to file>
- 'localhost':983
- '<SYSTEM32>\svchost.exe' -k LocalHostWin
- '<SYSTEM32>\cmd.exe' /c intrace.bat
- '<SYSTEM32>\cmd.exe' /c netsh firewall add portopening TCP 983 "adp"
- '<SYSTEM32>\cmd.exe' /c netsh advfirewall firewall add rule name="POP3 Server" dir=in protocol=tcp localport=983 action=allow enable=yes