Technical Information
- [HKLM\System\CurrentControlSet\Services\ialdnwxf] 'ImagePath' = '<Current directory>\superec.ProcessMemory.sys'
- 'ialdnwxf' <Current directory>\superec.ProcessMemory.sys
- %TEMP%\e_n4\krnln.fnr
- %TEMP%\e_n4\iext.fnr
- <Current directory>\superec.processmemory.sys
- %WINDIR%\temp\uddf46c.tmp
- <Current directory>\skinh_el.dll
- <Current directory>\skinh_el.dll
- %WINDIR%\temp\uddf46c.tmp