Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\uvnc_service] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\uvnc_service] 'ImagePath' = '"%ProgramFiles%\Yellow\winvnc.exe" -service'
- %TEMP%\aut1.tmp
- %TEMP%\VNC\driver\vista64\setupdrv.exe
- %TEMP%\aut39.tmp
- %TEMP%\VNC\driver\vista64\driver\mv2.cat
- %TEMP%\aut3A.tmp
- %TEMP%\VNC\driver\vista64\driver\mv2.dll
- %TEMP%\aut3B.tmp
- %TEMP%\VNC\driver\vista64\driver\mv2.inf
- %TEMP%\aut3C.tmp
- %TEMP%\VNC\driver\vista64\driver\mv2.sys
- %TEMP%\aut3D.tmp
- %TEMP%\VNC\driver\w2K\setupdrv.exe
- %TEMP%\aut3E.tmp
- %TEMP%\VNC\driver\w2K\driver\mv2.cat
- %TEMP%\aut3F.tmp
- %TEMP%\VNC\driver\w2K\driver\mv2.dll
- %TEMP%\aut38.tmp
- %TEMP%\aut2C.tmp
- %TEMP%\VNC\driver\vista\driver\mv2.sys
- %TEMP%\VNC\driver\vista\driver\mv2.inf
- %TEMP%\aut2D.tmp
- %TEMP%\VNC\Install_x64\workgrpdomnt4.dll
- %TEMP%\aut2E.tmp
- %TEMP%\VNC\Install_x64\SecureVNCPlugin64.dsm
- %TEMP%\aut31.tmp
- %TEMP%\VNC\cert\CertMgr.Exe
- %TEMP%\aut32.tmp
- %TEMP%\VNC\cert\vnc_cer.cer
- %TEMP%\aut33.tmp
- %TEMP%\VNC\driver\vista\setupdrv.exe
- %TEMP%\aut34.tmp
- %TEMP%\VNC\driver\vista\driver\mv2.cat
- %TEMP%\aut35.tmp
- %TEMP%\VNC\driver\vista\driver\mv2.dll
- %TEMP%\aut36.tmp
- %TEMP%\aut37.tmp
- %TEMP%\VNC\Install_x64\vnchooks.dll
- %TEMP%\aut40.tmp
- %TEMP%\aut42.tmp
- %TEMP%\VNC\driver\xp64\driver\mv2.sys
- %ProgramFiles%\Yellow\authadmin.dll
- %ProgramFiles%\Yellow\authSSP.dll
- %ProgramFiles%\Yellow\ldapauth.dll
- %ProgramFiles%\Yellow\logging.dll
- %ProgramFiles%\Yellow\logmessages.dll
- %TEMP%\VNC\Install_2000\SCHook.dll
- %ProgramFiles%\Yellow\MSLogonACL.exe
- %ProgramFiles%\Yellow\SCHook.dll
- %ProgramFiles%\Yellow\SecureVNCPlugin.dsm
- %ProgramFiles%\Yellow\setcad.exe
- %ProgramFiles%\Yellow\vnchooks.dll
- %ProgramFiles%\Yellow\w8hook.dll
- %ProgramFiles%\Yellow\winvnc.exe
- %TEMP%\VNC\driver\xp64\driver\mv2.inf
- %TEMP%\aut4B.tmp
- %TEMP%\aut41.tmp
- %TEMP%\VNC\driver\w2K\driver\mv2.inf
- %TEMP%\aut49.tmp
- %TEMP%\VNC\driver\xp\setupdrv.exe
- %TEMP%\aut43.tmp
- %TEMP%\VNC\driver\xp\driver\mv2.cat
- %TEMP%\aut44.tmp
- %TEMP%\VNC\driver\xp\driver\mv2.dll
- %TEMP%\aut45.tmp
- %TEMP%\VNC\driver\xp\driver\mv2.inf
- %TEMP%\aut46.tmp
- %TEMP%\VNC\driver\xp\driver\mv2.sys
- %TEMP%\aut47.tmp
- %TEMP%\VNC\driver\xp64\setupdrv.exe
- %TEMP%\aut48.tmp
- %TEMP%\VNC\driver\xp64\driver\mv2.cat
- %TEMP%\VNC\driver\xp64\driver\mv2.dll
- %TEMP%\VNC\driver\w2K\driver\mv2.sys
- %TEMP%\aut4A.tmp
- %TEMP%\VNC\Install_x64\SCHook64.dll
- %TEMP%\aut2B.tmp
- %TEMP%\VNC\Install_x64\logmessages.dll
- %TEMP%\VNC\Install\logging.dll
- %TEMP%\autC.tmp
- %TEMP%\VNC\Install\logmessages.dll
- %TEMP%\autD.tmp
- %TEMP%\VNC\Install\SCHook.dll
- %TEMP%\autE.tmp
- %TEMP%\VNC\Install\vnchooks.dll
- %TEMP%\autF.tmp
- %TEMP%\VNC\Install\workgrpdomnt4.dll
- %TEMP%\aut10.tmp
- %TEMP%\VNC\Install\SecureVNCPlugin.dsm
- %TEMP%\aut13.tmp
- %TEMP%\VNC\Install_2000\winvnc.exe
- %TEMP%\aut14.tmp
- %TEMP%\VNC\Install\ldapauth.dll
- %TEMP%\VNC\Install_2000\MSLogonACL.exe
- %TEMP%\autA.tmp
- %TEMP%\aut9.tmp
- %TEMP%\VNC\ultravnc.ini
- %TEMP%\aut2.tmp
- %TEMP%\VNC\secedit.inf
- %TEMP%\aut3.tmp
- %TEMP%\VNC\Install\MSLogonACL.exe
- %TEMP%\aut4.tmp
- %TEMP%\VNC\Install\setcad.exe
- %TEMP%\aut5.tmp
- %TEMP%\VNC\Install\sas.dll
- %TEMP%\aut6.tmp
- %TEMP%\VNC\Install\w8hook.dll
- %TEMP%\aut7.tmp
- %TEMP%\VNC\Install\winvnc.exe
- %TEMP%\aut8.tmp
- %TEMP%\VNC\Install\authadmin.dll
- %TEMP%\VNC\Install\authSSP.dll
- %TEMP%\aut15.tmp
- %TEMP%\autB.tmp
- %TEMP%\VNC\Install_2000\authadmin.dll
- %TEMP%\VNC\Install_x64\setcad.exe
- %TEMP%\VNC\Install_x64\sas.dll
- %TEMP%\aut24.tmp
- %TEMP%\VNC\Install_x64\w8hook64.dll
- %TEMP%\aut25.tmp
- %TEMP%\aut26.tmp
- %TEMP%\VNC\Install_x64\authadmin.dll
- %TEMP%\aut27.tmp
- %TEMP%\VNC\Install_x64\authSSP.dll
- %TEMP%\aut28.tmp
- %TEMP%\VNC\Install_x64\ldapauth.dll
- %TEMP%\aut29.tmp
- %TEMP%\VNC\Install_x64\logging.dll
- %TEMP%\aut2A.tmp
- %TEMP%\aut22.tmp
- %TEMP%\aut21.tmp
- %TEMP%\aut23.tmp
- %TEMP%\VNC\Install_x64\MSLogonACL.exe
- %TEMP%\VNC\Install_x64\winvnc.exe
- %TEMP%\aut16.tmp
- %TEMP%\aut17.tmp
- %TEMP%\VNC\Install_2000\ldapauth.dll
- %TEMP%\aut18.tmp
- %TEMP%\VNC\Install_2000\logging.dll
- %TEMP%\aut19.tmp
- %TEMP%\VNC\Install_2000\logmessages.dll
- %ProgramFiles%\Yellow\workgrpdomnt4.dll
- %ProgramFiles%\Yellow\sas.dll
- %TEMP%\aut1A.tmp
- %TEMP%\VNC\Install_2000\vnchooks.dll
- %TEMP%\aut1C.tmp
- %TEMP%\VNC\Install_2000\workgrpdomnt4.dll
- %TEMP%\aut1D.tmp
- %TEMP%\VNC\Install_2000\SecureVNCPlugin.dsm
- %TEMP%\aut20.tmp
- %TEMP%\VNC\Install_2000\authSSP.dll
- %TEMP%\aut1B.tmp
- %ProgramFiles%\Yellow\ultravnc.ini
- %TEMP%\aut1.tmp
- %TEMP%\VNC\Install\logging.dll
- %TEMP%\VNC\Install\ldapauth.dll
- %TEMP%\VNC\Install\authSSP.dll
- %TEMP%\VNC\Install\authadmin.dll
- %TEMP%\VNC\Install_2000\workgrpdomnt4.dll
- %TEMP%\VNC\Install_2000\winvnc.exe
- %TEMP%\VNC\Install_2000\vnchooks.dll
- %TEMP%\VNC\Install_2000\SecureVNCPlugin.dsm
- %TEMP%\VNC\Install_2000\SCHook.dll
- %TEMP%\VNC\Install_2000\MSLogonACL.exe
- %TEMP%\VNC\Install_2000\logmessages.dll
- %TEMP%\VNC\Install_2000\logging.dll
- %TEMP%\VNC\Install_2000\ldapauth.dll
- %TEMP%\VNC\Install_2000\authSSP.dll
- %TEMP%\VNC\Install\logmessages.dll
- %TEMP%\VNC\Install_2000\authadmin.dll
- %TEMP%\VNC\Install_x64\winvnc.exe
- %TEMP%\VNC\Install_x64\w8hook64.dll
- %TEMP%\VNC\Install_x64\vnchooks.dll
- %TEMP%\VNC\Install_x64\setcad.exe
- %TEMP%\VNC\Install_x64\SecureVNCPlugin64.dsm
- %TEMP%\VNC\Install_x64\SCHook64.dll
- %TEMP%\VNC\Install_x64\sas.dll
- %TEMP%\VNC\Install_x64\MSLogonACL.exe
- %TEMP%\VNC\Install_x64\logmessages.dll
- %TEMP%\VNC\Install_x64\logging.dll
- %TEMP%\VNC\Install_x64\ldapauth.dll
- %TEMP%\VNC\Install_x64\authSSP.dll
- %TEMP%\VNC\Install_x64\authadmin.dll
- %TEMP%\VNC\ultravnc.ini
- %TEMP%\VNC\Install_x64\workgrpdomnt4.dll
- %TEMP%\VNC\Install\MSLogonACL.exe
- %TEMP%\VNC\Install\sas.dll
- %TEMP%\VNC\Install\SCHook.dll
- %TEMP%\VNC\driver\w2K\driver\mv2.cat
- %TEMP%\VNC\driver\w2K\driver\mv2.dll
- %TEMP%\VNC\driver\w2K\driver\mv2.inf
- %TEMP%\VNC\driver\w2K\driver\mv2.sys
- %TEMP%\VNC\driver\vista64\setupdrv.exe
- %TEMP%\VNC\driver\vista64\driver\mv2.cat
- %TEMP%\VNC\driver\vista64\driver\mv2.inf
- %TEMP%\VNC\cert\CertMgr.Exe
- %TEMP%\VNC\driver\vista64\driver\mv2.sys
- %TEMP%\VNC\driver\vista\setupdrv.exe
- %TEMP%\VNC\driver\vista\driver\mv2.cat
- %TEMP%\VNC\driver\vista\driver\mv2.dll
- %TEMP%\VNC\driver\vista\driver\mv2.inf
- %TEMP%\VNC\driver\vista\driver\mv2.sys
- %TEMP%\VNC\driver\w2K\setupdrv.exe
- %TEMP%\VNC\driver\xp\driver\mv2.sys
- %TEMP%\VNC\driver\xp\driver\mv2.inf
- %TEMP%\VNC\driver\xp\driver\mv2.dll
- %TEMP%\VNC\driver\xp\driver\mv2.cat
- %TEMP%\VNC\driver\xp\setupdrv.exe
- %TEMP%\VNC\driver\xp64\driver\mv2.sys
- %TEMP%\VNC\driver\xp64\driver\mv2.inf
- %TEMP%\VNC\driver\xp64\driver\mv2.dll
- %TEMP%\VNC\driver\xp64\driver\mv2.cat
- %TEMP%\VNC\driver\xp64\setupdrv.exe
- %TEMP%\VNC\Install\workgrpdomnt4.dll
- %TEMP%\VNC\Install\winvnc.exe
- %TEMP%\VNC\Install\w8hook.dll
- %TEMP%\VNC\Install\vnchooks.dll
- %TEMP%\VNC\Install\setcad.exe
- %TEMP%\VNC\Install\SecureVNCPlugin.dsm
- %TEMP%\VNC\secedit.inf
- %TEMP%\VNC\driver\vista64\driver\mv2.dll
- %TEMP%\aut4B.tmp
- %TEMP%\aut41.tmp
- %TEMP%\aut23.tmp
- %TEMP%\aut22.tmp
- %TEMP%\aut21.tmp
- %TEMP%\aut20.tmp
- %TEMP%\aut1D.tmp
- %TEMP%\aut1C.tmp
- %TEMP%\aut1B.tmp
- %TEMP%\aut1A.tmp
- %TEMP%\aut19.tmp
- %TEMP%\aut18.tmp
- %TEMP%\aut17.tmp
- %TEMP%\aut16.tmp
- %TEMP%\aut15.tmp
- %TEMP%\aut14.tmp
- %TEMP%\aut24.tmp
- %TEMP%\aut13.tmp
- %TEMP%\autF.tmp
- %TEMP%\autE.tmp
- %TEMP%\autD.tmp
- %TEMP%\autC.tmp
- %TEMP%\autB.tmp
- %TEMP%\autA.tmp
- %TEMP%\aut9.tmp
- %TEMP%\aut8.tmp
- %TEMP%\aut7.tmp
- %TEMP%\aut6.tmp
- %TEMP%\aut5.tmp
- %TEMP%\aut4.tmp
- %TEMP%\aut3.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut10.tmp
- %TEMP%\aut25.tmp
- %TEMP%\aut26.tmp
- %TEMP%\aut27.tmp
- %TEMP%\aut3B.tmp
- %TEMP%\aut3C.tmp
- %TEMP%\aut3D.tmp
- %TEMP%\aut3E.tmp
- %TEMP%\aut3F.tmp
- %TEMP%\aut40.tmp
- %TEMP%\aut42.tmp
- %TEMP%\aut49.tmp
- %TEMP%\aut43.tmp
- %TEMP%\aut44.tmp
- %TEMP%\aut45.tmp
- %TEMP%\aut46.tmp
- %TEMP%\aut47.tmp
- %TEMP%\aut48.tmp
- %TEMP%\aut3A.tmp
- %TEMP%\aut39.tmp
- %TEMP%\aut38.tmp
- %TEMP%\aut37.tmp
- %TEMP%\aut36.tmp
- %TEMP%\aut35.tmp
- %TEMP%\aut34.tmp
- %TEMP%\aut33.tmp
- %TEMP%\aut32.tmp
- %TEMP%\aut31.tmp
- %TEMP%\aut2E.tmp
- %TEMP%\aut2D.tmp
- %TEMP%\aut2C.tmp
- %TEMP%\aut2B.tmp
- %TEMP%\aut2A.tmp
- %TEMP%\aut29.tmp
- %TEMP%\aut28.tmp
- %TEMP%\aut4A.tmp
- %TEMP%\VNC\cert\vnc_cer.cer
- 'localhost':5900
- '%ProgramFiles%\Yellow\winvnc.exe' -install
- '%ProgramFiles%\Yellow\winvnc.exe' -service
- '%ProgramFiles%\Yellow\winvnc.exe' -service_run
- '<SYSTEM32>\net.exe' start "uvnc_service"
- '<SYSTEM32>\net1.exe' start "uvnc_service"