%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\MSINET[1].OCX
<SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\cmyip[1]
<SYSTEM32>\MSWINSCK.OCX
C:\Autorun.inf
<SYSTEM32>\SMSSS.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\MSWINSCK[1].OCX
C:\autorun.exe
Sets the 'hidden' attribute to the following files:
<Drive name for removable media>:\autorun.exe
<Drive name for removable media>:\Autorun.inf
C:\Autorun.inf
<SYSTEM32>\SMSSS.exe
C:\autorun.exe
Network activity:
Connects to:
'as##.no-ip.info':2122
'as##.no-ip.info':1808
'www.cm##p.com':80
'localhost':1036
'me####s.lycos.co.uk':80
TCP:
HTTP GET requests:
www.cm##p.com/
me####s.lycos.co.uk/shofshof/MSINET.OCX
me####s.lycos.co.uk/shofshof/MSWINSCK.OCX
UDP:
DNS ASK as##.no-ip.info
DNS ASK www.cm##p.com
DNS ASK me####s.lycos.co.uk
Download Dr.Web for Android
Free three-month trial
All protection features available
Renew your trial license in AppGallery/on Google Pay
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more