Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- '<LS_APPDATA>\Xenocode\Sandbox\Dofus Bot 2012 Working\1.1.0.0\2012.05.07T21.38\Native\STUBEXE\8.0.1112\@PROFILE@\Local Settings\Temp\IXP000.TMP\DOFUSB~1.EXE'
- '<LS_APPDATA>\Xenocode\Sandbox\Dofus Bot 2012 Working\1.1.0.0\2012.05.07T21.38\Virtual\STUBEXE\8.0.1112\@APPDIR@\Dofus Bot 2012 Working.exe'
- %WINDIR%\Explorer.EXE
- %TEMP%\IXP000.TMP\DOFUSB~1.EXE
- 'any':1604
- 'ep#####331.no-ip.biz':1604
- DNS ASK ep#####331.no-ip.biz
- ClassName: 'Shell_TrayWnd' WindowName: ''