Technical Information
- [HKLM\System\CurrentControlSet\Services\ialdnwxf] 'ImagePath' = '%WINDIR%\SysWOW64\superec.ProcessMemory.sys'
- 'ialdnwxf' %WINDIR%\SysWOW64\\superec.ProcessMemory.sys
- 'ialdnwxf' %WINDIR%\SysWOW64\superec.ProcessMemory.sys
- %WINDIR%\syswow64\superec.processmemory.sys
- %WINDIR%\temp\udd13be.tmp
- %WINDIR%\temp\udd13be.tmp