Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\cgS0oezRbEw] 'ImagePath' = '<SYSTEM32>\1e951\CDClient_EX.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\cgS0oezRbEw] 'ImagePath' = '\DosDevices\<SYSTEM32>\1e951\CDClient_EX.sys'
- '<SYSTEM32>\cmd.exe' /c dir "%HOMEPATH%\AppData\Local\Mozilla\Firefox\Profiles\*.default" /B
- '<SYSTEM32>\dumprep.exe' 1428 -dm 7 7 %TEMP%\WERf0ac.dir00\explorer.exe.mdmp 16325836412028040
- '<SYSTEM32>\cmd.exe' /C <SYSTEM32>\192703.bat
- '<SYSTEM32>\cmd.exe' /c dir "<LS_APPDATA>\Mozilla\Firefox\Profiles\*.default" /B
- <SYSTEM32>\pDsEGHC.dll
- <SYSTEM32>\1e951\CDClient_EX.sys
- <SYSTEM32>\192703.bat
- <SYSTEM32>\CDCLOG.txt
- <SYSTEM32>\CDCLOG.txt
- <SYSTEM32>\1e951\CDClient_EX.sys
- ClassName: 'shell_wnd_class' WindowName: 'BROSS'
- ClassName: 'ToolbarWindow32' WindowName: ''
- ClassName: 'shell_wnd_05554' WindowName: 'unity-studio'
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'TApplication' WindowName: 'eyoorun'
- ClassName: 'SHELLDLL_DefView' WindowName: ''
- ClassName: 'Progman' WindowName: 'Program Manager'
- ClassName: 'SysListView32' WindowName: 'FolderView'
- ClassName: 'ReBarWindow32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''