Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\.Net CLR] 'Start' = '00000002'
- '%WINDIR%\jwtdww.exe' Win7
- '%WINDIR%\jwtdww.exe'
- '<SYSTEM32>\wermgr.exe' "-queuereporting_svc" "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_jwtdww.exe_8bcb68e66b1c2e60ab6f103dbfd41762792bc0_08ade7ee"
- '<SYSTEM32>\wermgr.exe' "-queuereporting_svc" "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_jwtdww.exe_8bcb68e66b1c2e60ab6f103dbfd41762792bc0_cab_086dbb43"
- %WINDIR%\jwtdww.exe
- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_jwtdww.exe_8bcb68e66b1c2e60ab6f103dbfd41762792bc0_08ade7ee\Report.wer.tmp в C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_jwtdww.exe_8bcb68e66b1c2e60ab6f103dbfd41762792bc0_08ade7ee\Report.wer
- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_jwtdww.exe_8bcb68e66b1c2e60ab6f103dbfd41762792bc0_cab_086dbb43\Report.wer.tmp в C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_jwtdww.exe_8bcb68e66b1c2e60ab6f103dbfd41762792bc0_cab_086dbb43\Report.wer
- DNS ASK dn#.##ftncsi.com
- DNS ASK ip.###ilangwl.com
- ClassName: 'Shell_TrayWnd' WindowName: ''