Техническая информация
- '<SYSTEM32>\Mssepts.exe'
- '<SYSTEM32>\dumprep.exe' 1428 -dm 7 7 %TEMP%\WER4ff9.dir00\explorer.exe.hdmp 16325836412028040
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\sysdm.cpl,NoExecuteProcessException %WINDIR%\explorer.exe
- '<SYSTEM32>\dumprep.exe' 1428 -dm 7 7 %TEMP%\WER4ff9.dir00\explorer.exe.mdmp 16325836412028028
- '<SYSTEM32>\cmd.exe' /c c:\delus.bat
- %WINDIR%\Explorer.EXE
- C:\delus.bat
- <SYSTEM32>\srvany.exe
- <SYSTEM32>\Mssepts.dll
- %TEMP%\WER4ff9.dir00\explorer.exe.mdmp
- %TEMP%\WER4ff9.dir00\manifest.txt
- %TEMP%\WER4ff9.dir00\appcompat.txt
- %TEMP%\WER4ff9.dir00\explorer.exe.hdmp
- %TEMP%\E_4\Exmlrpc.fne
- %TEMP%\E_4\dp1.fne
- %TEMP%\E_4\krnln.fnr
- <SYSTEM32>\Mssepts.exe
- %WINDIR%\krnln.fnr
- %WINDIR%\Exmlrpc.fne
- %WINDIR%\dp1.fne
- %WINDIR%\krnln.fnr
- %WINDIR%\Exmlrpc.fne
- %WINDIR%\dp1.fne
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'