Техническая информация
- %WINDIR%\syswow64\svchost.exe
- %WINDIR%\syswow64\help\0202021dsfsd.ini
- %WINDIR%\syswow64\help\1.duqxowt
- %WINDIR%\syswow64\help\2.duqxowt
- %WINDIR%\syswow64\duqxowt\duqxowt\wcoumph\m.ini
- %WINDIR%\2.ini
- %WINDIR%\help\duqxowt.hlp
- %WINDIR%\syswow64\duqxowt\duqxowt\wcoumph\etdaisu.exe
- <SYSTEM32>\spool\drivers\w32x86\3\uqxowtd\uqxowtd.exe
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd000.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd001.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd002.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd003.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd004.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd005.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd006.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd007.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd008.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd009.imd
- D:\recycler\s-1-5-18\dc8\uqxowtd\uqxowtd010.imd
- '%WINDIR%\syswow64\duqxowt\duqxowt\wcoumph\etdaisu.exe' -close
- '%WINDIR%\syswow64\svchost.exe' -NetworkService
- '%WINDIR%\syswow64\duqxowt\duqxowt\wcoumph\etdaisu.exe' -close (со скрытым окном)