Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\cpuz148] 'ImagePath' = '%WINDIR%\temp\cpuz148\cpuz148_x64.sys'
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\64\occtaux.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\costura.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\livecharts.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\livecharts.geared.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\livecharts.wpf.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\materialdesigncolors.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\materialdesignthemes.wpf.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\methoddecorator.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\nlog.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\sharpdx.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\sharpdx.dxgi.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\simpleinjector.dll
- %TEMP%\costura\6a9a5e593edb83802557fefe6dff1371\stateless.dll
- %WINDIR%\temp\cpuz148\cpuz148_x64.sys
- %WINDIR%\temp\udd90c2.tmp
- %WINDIR%\temp\udd90c2.tmp
- ClassName: 'MPWClass' WindowName: ''
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;' (со скрытым окном)
- '<SYSTEM32>\wisptis.exe' /ManualLaunch;