Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\DWMRCS] 'Start' = '00000002'
- <SYSTEM32>\DWRCST.exe
- <SYSTEM32>\DWRCS.EXE -service
- <SYSTEM32>\DWRCK.DLL
- <SYSTEM32>\DWRCShell.dll
- %TEMP%\DWD102531\DWRCSU.cfg
- <SYSTEM32>\DWRCS.EXE
- <SYSTEM32>\DWRCS.ini
- <SYSTEM32>\DWRCSET.dll
- <SYSTEM32>\DWRCST.exe
- %TEMP%\DWD102531\DWRCSP.cfg
- %TEMP%\DWD102531\DWRCS.EXE
- %TEMP%\DWD102531\DWRCK.dll
- %TEMP%\DWD102531\DWRCS.cfg
- %TEMP%\DWD102531\DWRCSSet.cfg
- %TEMP%\DWD102531\DWRCShell.dll
- %TEMP%\DWD102531\DWRCSI.DLL
- %TEMP%\DWD102531\DWRCSET.dll
- %TEMP%\DWD102531\DWRCST.exe
- %TEMP%\DWD102531\DWRCShell.dll
- %TEMP%\DWD102531\DWRCSET.dll
- %TEMP%\DWD102531\DWRCSI.DLL
- %TEMP%\DWD102531\DWRCST.exe.manifest
- %TEMP%\DWD102531\DWRCST.exe
- %TEMP%\DWD102531\DWRCK.dll
- %TEMP%\DWD102531\DWRCSU.cfg
- %TEMP%\DWD102531\DWRCSP.cfg
- %TEMP%\DWD102531\DWRCSSet.cfg
- %TEMP%\DWD102531\DWRCS.EXE
- %TEMP%\DWD102531\DWRCS.cfg
- 'localhost':6139
- 'localhost':6129
- ClassName: 'Progman' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''