Техническая информация
- %WINDIR%\syswow64\svchost.exe
- %WINDIR%\syswow64\help\0202021dsfsd.ini
- %WINDIR%\syswow64\help\1.oxtadhv
- %WINDIR%\syswow64\help\2.oxtadhv
- %WINDIR%\syswow64\oxtadhv\oxtadhv\ygkibkf\m.ini
- %WINDIR%\2.ini
- %WINDIR%\help\oxtadhv.hlp
- %WINDIR%\syswow64\oxtadhv\oxtadhv\ygkibkf\dgyngkh.exe
- <SYSTEM32>\spool\drivers\w32x86\3\xtadhvo\xtadhvo.exe
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo000.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo001.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo002.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo003.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo004.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo005.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo006.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo007.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo008.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo009.imd
- D:\recycler\s-1-5-18\dc8\xtadhvo\xtadhvo010.imd
- '%WINDIR%\syswow64\oxtadhv\oxtadhv\ygkibkf\dgyngkh.exe' -close
- '%WINDIR%\syswow64\svchost.exe' -NetworkService
- '%WINDIR%\syswow64\oxtadhv\oxtadhv\ygkibkf\dgyngkh.exe' -close (со скрытым окном)