Техническая информация
- <SYSTEM32>\tasks\systemfailurereporter
- '%LOCALAPPDATA%\systemfailurereporter\systemfailurereporter.exe'
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 2236
- %LOCALAPPDATA%\t.txt
- %LOCALAPPDATA%\systemfailurereporter\b.doc
- %LOCALAPPDATA%\systemfailurereporter\update.xml
- %TEMP%\956754.cvr
- %LOCALAPPDATA%\t.txt
- %LOCALAPPDATA%\systemfailurereporter\b.doc в %LOCALAPPDATA%\systemfailurereporter\systemfailurereporter.exe
- '11.#.188.38':443
- '%LOCALAPPDATA%\systemfailurereporter\systemfailurereporter.exe' ' (со скрытым окном)
- '<SYSTEM32>\taskeng.exe' {BDEA04D1-AF67-496A-887D-492BC1732BEF} S-1-5-21-1238866942-1249195528-555854008-1000:nqkhlwplk\user:Interactive:[1]