Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Iprip] 'Start' = '00000002'
- <LS_APPDATA>\DrWatson\DrWatson.exe
- <SYSTEM32>\rundll32.exe "<LS_APPDATA>\DrWatson\DrWatson.dll",PrepareDebugSymbol ::S\<LS_APPDATA>\DrWatson\DrWatson.exe
- %WINDIR%\Debug\MEMORY.DMP
- %WINDIR%\Debug\erros.log
- %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.dll.mui
- %APPDATA%\Microsoft\Thumbs.db
- %APPDATA%\Microsoft\Windows\slideshow.ini
- %APPDATA%\Microsoft\MMC\hh.dat
- <LS_APPDATA>\DrWatson\DrWatson.dll
- <SYSTEM32>\dcoms.dll
- %TEMP%\log.tmp
- %APPDATA%\Microsoft\Internet Explorer\Desktop.ini
- <LS_APPDATA>\DrWatson\DrWatson.cfg
- <LS_APPDATA>\DrWatson\DrWatson.exe
- <SYSTEM32>\wbem\wbemsub.dll
- <LS_APPDATA>\DrWatson\DrWatson.exe
- %TEMP%\log.tmp