Technical Information
- [<HKLM>\System\CurrentControlSet\Services\ialdnwxf] 'ImagePath' = '%WINDIR%\SysWOW64\superec.ProcessMemory.sys'
- %WINDIR%\syswow64\superec.processmemory.sys
- %WINDIR%\temp\udda6e0.tmp
- %WINDIR%\syswow64\skinh_el.dll
- %WINDIR%\syswow64\skinh_el.dll
- %WINDIR%\temp\udda6e0.tmp