Техническая информация
- %WINDIR%\syswow64\svchost.exe
- %WINDIR%\syswow64\help\0202021dsfsd.ini
- %WINDIR%\syswow64\help\1.uoktmlh
- %WINDIR%\syswow64\help\2.uoktmlh
- %WINDIR%\syswow64\uoktmlh\uoktmlh\uuttfyu\m.ini
- %WINDIR%\2.ini
- %WINDIR%\help\uoktmlh.hlp
- %WINDIR%\syswow64\uoktmlh\uoktmlh\uuttfyu\qtasvub.exe
- <SYSTEM32>\spool\drivers\w32x86\3\oktmlhu\oktmlhu.exe
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu000.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu001.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu002.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu003.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu004.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu005.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu006.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu007.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu008.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu009.imd
- D:\recycler\s-1-5-18\dc8\oktmlhu\oktmlhu010.imd
- '%WINDIR%\syswow64\uoktmlh\uoktmlh\uuttfyu\qtasvub.exe' -close
- '%WINDIR%\syswow64\svchost.exe' -NetworkService
- '%WINDIR%\syswow64\uoktmlh\uoktmlh\uuttfyu\qtasvub.exe' -close (со скрытым окном)