Technical Information
- %WINDIR%\wnuninst.ini
- %WINDIR%\igfxem.exe
- from %WINDIR%\igfxem.exe to %TEMP%\1128651\....\temporaryfile
- %WINDIR%\igfxem.exe
- DNS ASK ha#.#n666.cc
- DNS ASK ha#.##999888777.win
- ClassName: '' WindowName: ''
- '%WINDIR%\igfxem.exe'
- '%WINDIR%\igfxem.exe' ' (with hidden window)
- '%WINDIR%\syswow64\explorer.exe' /n,%WINDIR%\igfxEM.exe