Technical Information
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'BSOD.exe'
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '%WINDIR%\BSOD.exe'
- %APPDATA%\microsoft\windows\start menu\programs\startup\bsod.exe
- Command Prompt (CMD)
- Windows Task Manager (Taskmgr)
- Registry Editor (RegEdit)
- User Account Control (UAC)
- %HOMEPATH%\desktop\000814251_video_01.avi
- %HOMEPATH%\desktop\testcertificate.cer
- %HOMEPATH%\desktop\split.avi
- %HOMEPATH%\desktop\sdksampleprivdeveloper.cer
- %HOMEPATH%\desktop\nwfieldnotes1966.docx
- %HOMEPATH%\desktop\lisp_success.doc
- %HOMEPATH%\desktop\join.avi
- %HOMEPATH%\desktop\testee.cer
- %HOMEPATH%\desktop\issi2013_template_for_posters.docx
- %HOMEPATH%\desktop\glidescope_review_rev_010.docx
- %HOMEPATH%\desktop\contosoroot.cer
- %HOMEPATH%\desktop\browse.htm
- %HOMEPATH%\desktop\archer.avi
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
- %HOMEPATH%\desktop\adhd_and_obesity.docx
- %HOMEPATH%\desktop\hadac_newsletter_july_2010_final.docx
- %HOMEPATH%\desktop\tileimage.bmp
- %ProgramFiles%\desktop.ini.ert
- %WINDIR%\syswow64\msvcp140.dll.ert
- %WINDIR%\syswow64\msvcp140d.dll.ert
- %WINDIR%\syswow64\msvcp140_1.dll.ert
- %WINDIR%\syswow64\msvcp140_2.dll.ert
- %WINDIR%\syswow64\msvcp140_atomic_wait.dll.ert
- %WINDIR%\syswow64\msvcp140_codecvt_ids.dll.ert
- %WINDIR%\syswow64\msvcr100.dll.ert
- %WINDIR%\syswow64\noise.chs.ert
- %WINDIR%\syswow64\msvcr100d.dll.ert
- %WINDIR%\syswow64\msvcr110.dll.ert
- %WINDIR%\syswow64\msvcr110d.dll.ert
- %WINDIR%\syswow64\msvcr120.dll.ert
- %WINDIR%\syswow64\msvcr120d.dll.ert
- %WINDIR%\syswow64\msvcr90d.dll.ert
- %WINDIR%\syswow64\msvcp120d.dll.ert
- %WINDIR%\syswow64\msvcp90d.dll.ert
- %WINDIR%\syswow64\msvcp120.dll.ert
- %WINDIR%\syswow64\mfcm120.dll.ert
- %WINDIR%\syswow64\mfc140rus.dll.ert
- %WINDIR%\syswow64\mfc140u.dll.ert
- %WINDIR%\syswow64\mfcm100.dll.ert
- %WINDIR%\syswow64\mfcm100u.dll.ert
- %WINDIR%\syswow64\mfcm110.dll.ert
- %WINDIR%\syswow64\mfcm110u.dll.ert
- %WINDIR%\syswow64\mfcm120u.dll.ert
- %WINDIR%\syswow64\msvcp110.dll.ert
- %WINDIR%\syswow64\mfcm140.dll.ert
- %WINDIR%\syswow64\mfcm140u.dll.ert
- %WINDIR%\syswow64\msclmd.dll.ert
- %WINDIR%\syswow64\msvcm90d.dll.ert
- %WINDIR%\syswow64\msvcp100.dll.ert
- %WINDIR%\syswow64\msvcp100d.dll.ert
- %WINDIR%\syswow64\msvcp110d.dll.ert
- %WINDIR%\syswow64\vccorlib110.dll.ert
- %HOMEPATH%\desktop\wrar520.exe.ert
- %WINDIR%\syswow64\noise.kor.ert
- %WINDIR%\syswow64\vcruntime140d.dll.ert
- %WINDIR%\syswow64\vfpodbc.dll.ert
- %HOMEPATH%\ntuser.ini.ert
- %HOMEPATH%\documents\desktop.ini.ert
- %HOMEPATH%\music\desktop.ini.ert
- %HOMEPATH%\pictures\desktop.ini.ert
- %HOMEPATH%\desktop\000814251_video_01.avi.ert
- %WINDIR%\syswow64\noise.dat.ert
- %HOMEPATH%\desktop\calc.exe.ert
- %HOMEPATH%\desktop\desktop.ini.ert
- %HOMEPATH%\desktop\google chrome.lnk.ert
- %HOMEPATH%\desktop\skypesetup.exe.ert
- %HOMEPATH%\desktop\tcm851ax32.exe.ert
- %HOMEPATH%\desktop\telegram.lnk.ert
- %WINDIR%\syswow64\vcruntime140.dll.ert
- %WINDIR%\syswow64\mfc140kor.dll.ert
- %WINDIR%\syswow64\vcomp140.dll.ert
- %WINDIR%\syswow64\vcamp140.dll.ert
- %WINDIR%\syswow64\noise.tha.ert
- %WINDIR%\syswow64\perfstringbackup.ini.ert
- %WINDIR%\syswow64\ticrf.rat.ert
- %WINDIR%\syswow64\ucrtbased.dll.ert
- %WINDIR%\syswow64\vcamp110.dll.ert
- %WINDIR%\syswow64\vcamp120.dll.ert
- %WINDIR%\syswow64\noise.cht.ert
- %WINDIR%\syswow64\vcomp110.dll.ert
- %WINDIR%\syswow64\vccorlib110d.dll.ert
- %WINDIR%\syswow64\vccorlib120.dll.ert
- %WINDIR%\syswow64\vccorlib120d.dll.ert
- %WINDIR%\syswow64\vccorlib140.dll.ert
- %WINDIR%\syswow64\vccorlib140d.dll.ert
- %WINDIR%\syswow64\vcomp100.dll.ert
- %WINDIR%\syswow64\vcomp120.dll.ert
- %HOMEPATH%\videos\desktop.ini.ert
- %WINDIR%\syswow64\mfc140jpn.dll.ert
- %WINDIR%\syswow64\mfc120rus.dll.ert
- %WINDIR%\syswow64\atl110.dll.ert
- %WINDIR%\syswow64\concrt140.dll.ert
- %WINDIR%\syswow64\concrt140d.dll.ert
- %WINDIR%\syswow64\dssec.dat.ert
- %WINDIR%\syswow64\icrav03.rat.ert
- %WINDIR%\syswow64\korwbrkr.lex.ert
- %WINDIR%\syswow64\mapisvc.inf.ert
- %WINDIR%\syswow64\mfc100fra.dll.ert
- %WINDIR%\syswow64\mfc100.dll.ert
- %WINDIR%\syswow64\mfc100chs.dll.ert
- %WINDIR%\syswow64\mfc100cht.dll.ert
- %WINDIR%\syswow64\mfc100deu.dll.ert
- %WINDIR%\syswow64\mfc100enu.dll.ert
- %WINDIR%\syswow64\mfc100esn.dll.ert
- %WINDIR%\syswow64\atl100.dll.ert
- %WINDIR%\syswow64\license.rtf.ert
- %WINDIR%\syswow64\aspnet_counters.dll.ert
- %WINDIR%\ocsetup_cbs_uninstall_searchengine-client-package.txt.ert
- %ProgramFiles(x86)%\desktop.ini.ert
- C:\users\desktop.ini.ert
- %WINDIR%\bootstat.dat.ert
- %WINDIR%\dtcinstall.log.ert
- %WINDIR%\enterprise.xml.ert
- %WINDIR%\msdfmap.ini.ert
- %WINDIR%\ocsetup_uninstall_searchengine-client-package.etl.ert
- %WINDIR%\win.ini.ert
- %WINDIR%\pfro.log.ert
- %WINDIR%\setupact.log.ert
- %WINDIR%\setuperr.log.ert
- %WINDIR%\starter.xml.ert
- %WINDIR%\system.ini.ert
- %WINDIR%\tssysprep.log.ert
- %WINDIR%\windowsupdate.log.ert
- %WINDIR%\syswow64\mfc110esn.dll.ert
- %WINDIR%\syswow64\mfc140fra.dll.ert
- %WINDIR%\syswow64\mfc100kor.dll.ert
- %WINDIR%\syswow64\mfc120enu.dll.ert
- %WINDIR%\syswow64\mfc120esn.dll.ert
- %WINDIR%\syswow64\mfc120fra.dll.ert
- %WINDIR%\syswow64\mfc120ita.dll.ert
- %WINDIR%\syswow64\mfc120jpn.dll.ert
- %WINDIR%\syswow64\mfc120kor.dll.ert
- %WINDIR%\syswow64\mfc120u.dll.ert
- %WINDIR%\syswow64\mfc100jpn.dll.ert
- %WINDIR%\syswow64\mfc140.dll.ert
- %WINDIR%\syswow64\mfc140chs.dll.ert
- %WINDIR%\syswow64\mfc140cht.dll.ert
- %WINDIR%\syswow64\mfc140deu.dll.ert
- %WINDIR%\syswow64\mfc140enu.dll.ert
- %WINDIR%\syswow64\mfc140esn.dll.ert
- %WINDIR%\syswow64\mfc120deu.dll.ert
- %WINDIR%\syswow64\mfc140ita.dll.ert
- %WINDIR%\syswow64\mfc120cht.dll.ert
- %WINDIR%\syswow64\mfc110enu.dll.ert
- %WINDIR%\syswow64\mfc100rus.dll.ert
- %WINDIR%\syswow64\mfc100u.dll.ert
- %WINDIR%\syswow64\mfc110.dll.ert
- %WINDIR%\syswow64\mfc110chs.dll.ert
- %WINDIR%\syswow64\mfc110cht.dll.ert
- %WINDIR%\syswow64\mfc110deu.dll.ert
- %WINDIR%\syswow64\mfc100ita.dll.ert
- %WINDIR%\syswow64\mfc120.dll.ert
- %WINDIR%\syswow64\mfc110fra.dll.ert
- %WINDIR%\syswow64\mfc110ita.dll.ert
- %WINDIR%\syswow64\mfc110jpn.dll.ert
- %WINDIR%\syswow64\mfc110kor.dll.ert
- %WINDIR%\syswow64\mfc110rus.dll.ert
- %WINDIR%\syswow64\mfc110u.dll.ert
- %WINDIR%\syswow64\mfc120chs.dll.ert
- %WINDIR%\bsod.exe
- %WINDIR%\bsod.exe
- <Full path to file>
- %WINDIR%\bootstat.dat
- %WINDIR%\syswow64\msvcp140_codecvt_ids.dll
- %WINDIR%\syswow64\msvcp140_atomic_wait.dll
- %WINDIR%\syswow64\msvcp140_2.dll
- %WINDIR%\syswow64\msvcp140_1.dll
- %WINDIR%\syswow64\msvcp140d.dll
- %WINDIR%\syswow64\msvcp140.dll
- %WINDIR%\syswow64\msvcp120d.dll
- %WINDIR%\syswow64\msvcp120.dll
- %WINDIR%\syswow64\msvcp110d.dll
- %WINDIR%\syswow64\msvcp110.dll
- %WINDIR%\syswow64\msvcp100d.dll
- %WINDIR%\syswow64\msvcp100.dll
- %WINDIR%\syswow64\msvcm90d.dll
- %WINDIR%\syswow64\mfc140enu.dll
- %WINDIR%\syswow64\msclmd.dll
- %WINDIR%\syswow64\mfcm140.dll
- %WINDIR%\syswow64\mfcm120u.dll
- %WINDIR%\syswow64\mfcm120.dll
- %WINDIR%\syswow64\mfcm110u.dll
- %WINDIR%\syswow64\mfcm110.dll
- %WINDIR%\syswow64\mfcm100u.dll
- %WINDIR%\syswow64\mfcm100.dll
- %WINDIR%\syswow64\mfc140u.dll
- %WINDIR%\syswow64\mfc140rus.dll
- %WINDIR%\syswow64\mfc140kor.dll
- %WINDIR%\syswow64\mfc140jpn.dll
- %WINDIR%\syswow64\mfc140ita.dll
- %WINDIR%\syswow64\mfc140fra.dll
- %WINDIR%\syswow64\mfcm140u.dll
- %WINDIR%\syswow64\mfc140esn.dll
- %WINDIR%\syswow64\msvcp90d.dll
- %WINDIR%\syswow64\ucrtbased.dll
- %WINDIR%\syswow64\vcruntime140.dll
- %WINDIR%\syswow64\vcomp140.dll
- %WINDIR%\syswow64\vcomp120.dll
- %WINDIR%\syswow64\vcomp110.dll
- %WINDIR%\syswow64\vcomp100.dll
- %WINDIR%\syswow64\vccorlib140d.dll
- %WINDIR%\syswow64\vccorlib140.dll
- %WINDIR%\syswow64\vccorlib120d.dll
- %WINDIR%\syswow64\vccorlib120.dll
- %WINDIR%\syswow64\vccorlib110d.dll
- %WINDIR%\syswow64\vccorlib110.dll
- %WINDIR%\syswow64\vcamp140.dll
- %WINDIR%\syswow64\vcamp120.dll
- %WINDIR%\syswow64\msvcr100d.dll
- %WINDIR%\syswow64\msvcr100.dll
- %WINDIR%\syswow64\ticrf.rat
- %WINDIR%\syswow64\perfstringbackup.ini
- %WINDIR%\syswow64\noise.tha
- %WINDIR%\syswow64\noise.kor
- %WINDIR%\syswow64\noise.dat
- %WINDIR%\syswow64\noise.cht
- %WINDIR%\syswow64\noise.chs
- %WINDIR%\syswow64\msvcr90d.dll
- %WINDIR%\syswow64\msvcr120d.dll
- %WINDIR%\syswow64\msvcr120.dll
- %WINDIR%\syswow64\msvcr110d.dll
- %WINDIR%\syswow64\msvcr110.dll
- %WINDIR%\syswow64\msvcr100_clr0400.dll
- %WINDIR%\syswow64\vcamp110.dll
- %WINDIR%\syswow64\mfc140deu.dll
- %WINDIR%\syswow64\mfc140cht.dll
- %WINDIR%\syswow64\mfc140chs.dll
- %WINDIR%\syswow64\mfc100cht.dll
- %WINDIR%\syswow64\mfc100chs.dll
- %WINDIR%\syswow64\mfc100.dll
- %WINDIR%\syswow64\mapisvc.inf
- %WINDIR%\syswow64\license.rtf
- %WINDIR%\syswow64\korwbrkr.lex
- %WINDIR%\syswow64\icrav03.rat
- %WINDIR%\syswow64\dssec.dat
- %WINDIR%\syswow64\concrt140d.dll
- %WINDIR%\syswow64\concrt140.dll
- %WINDIR%\syswow64\atl110.dll
- %WINDIR%\syswow64\atl100.dll
- %WINDIR%\syswow64\mfc100enu.dll
- %WINDIR%\syswow64\aspnet_counters.dll
- %WINDIR%\windowsshell.manifest
- %WINDIR%\win.ini
- %WINDIR%\tssysprep.log
- %WINDIR%\system.ini
- %WINDIR%\starter.xml
- %WINDIR%\setuperr.log
- %WINDIR%\setupact.log
- %WINDIR%\pfro.log
- %WINDIR%\ocsetup_uninstall_searchengine-client-package.etl
- %WINDIR%\ocsetup_cbs_uninstall_searchengine-client-package.txt
- %WINDIR%\msdfmap.ini
- %WINDIR%\enterprise.xml
- %WINDIR%\dtcinstall.log
- %WINDIR%\windowsupdate.log
- %WINDIR%\syswow64\mfc100esn.dll
- %WINDIR%\syswow64\mfc100deu.dll
- %WINDIR%\syswow64\mfc100fra.dll
- %WINDIR%\syswow64\mfc140.dll
- %WINDIR%\syswow64\mfc110rus.dll
- %WINDIR%\syswow64\mfc120u.dll
- %WINDIR%\syswow64\mfc120rus.dll
- %WINDIR%\syswow64\mfc120kor.dll
- %WINDIR%\syswow64\mfc120jpn.dll
- %WINDIR%\syswow64\mfc120ita.dll
- %WINDIR%\syswow64\mfc120fra.dll
- %WINDIR%\syswow64\mfc120esn.dll
- %WINDIR%\syswow64\mfc120enu.dll
- %WINDIR%\syswow64\mfc120deu.dll
- %WINDIR%\syswow64\mfc120cht.dll
- %WINDIR%\syswow64\mfc120chs.dll
- %WINDIR%\syswow64\mfc120.dll
- %WINDIR%\syswow64\mfc110u.dll
- %WINDIR%\syswow64\mfc110kor.dll
- %WINDIR%\syswow64\mfc100ita.dll
- %WINDIR%\syswow64\mfc110jpn.dll
- %WINDIR%\syswow64\mfc110ita.dll
- %WINDIR%\syswow64\mfc110fra.dll
- %WINDIR%\syswow64\mfc110esn.dll
- %WINDIR%\syswow64\mfc110enu.dll
- %WINDIR%\syswow64\mfc110deu.dll
- %WINDIR%\syswow64\mfc110cht.dll
- %WINDIR%\syswow64\mfc110chs.dll
- %WINDIR%\syswow64\mfc110.dll
- %WINDIR%\syswow64\mfc100u.dll
- %WINDIR%\syswow64\mfc100rus.dll
- %WINDIR%\syswow64\mfc100kor.dll
- %WINDIR%\syswow64\mfc100jpn.dll
- %WINDIR%\syswow64\vcruntime140d.dll
- %WINDIR%\syswow64\vfpodbc.dll