Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\windows\CurrentVersion\Run] 'trofile' = '"%CommonProgramFiles%\Microsoft Shared\MSINFO\trofile.exe"'
- %CommonProgramFiles%\microsoft shared\msinfo\trofile.exe
- %CommonProgramFiles%\microsoft shared\msinfo\trofile.exe
- 'localhost':8188
- DNS ASK ho#####ddy.free3v.net
- ClassName: 'TAppBuilder' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- '%CommonProgramFiles%\microsoft shared\msinfo\trofile.exe'
- '%CommonProgramFiles%\microsoft shared\msinfo\trofile.exe' ' (with hidden window)