Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'lmhosts' = '%WINDIR%\svchost.exe -M1'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\svchost.exe' = '%WINDIR%\svchost.exe:*:Enabled:Windows Manager'
- '%WINDIR%\svchost.exe' atrun1
- <SYSTEM32>\wmiprvse.exe
- %WINDIR%\hotfix.ini
- %WINDIR%\KB830115.log
- %WINDIR%\svchost.exe
- %WINDIR%\KB830115.log
- '16#.#02.0.253':80