Creates the following files:
- <SYSTEM32>\wdrwscsvc.da
- <SYSTEM32>\wdrwscsvc.da_
- <SYSTEM32>\svcscrwin.da
- %ProgramFiles%\WinScare\winscrb.da_
- %ProgramFiles%\WinScare\winscrs.da
- %ProgramFiles%\WinScare\winscrs.da_
- %ProgramFiles%\WinScare\winscrb.da
- %TEMP%\nsc2.tmp\nsProcEx.dll
- %TEMP%\nsc2.tmp\System.dll
- %TEMP%\nsc2.tmp\SelfDel.dll
- %TEMP%\nsc2.tmp\winscrs.da_
- <SYSTEM32>\svcscrwin.da_
- %TEMP%\nsc2.tmp\nsProcess.dll
- %TEMP%\nsc2.tmp\winscrs.dll
Deletes the following files:
- %ProgramFiles%\WinScare\winscrb.da_
- %ProgramFiles%\WinScare\winscrs.da_
- <SYSTEM32>\wdrwscsvc.da_
- %TEMP%\nsc2.tmp\winscrs.da_
- <SYSTEM32>\svcscrwin.da_
Moves the following files:
- from <SYSTEM32>\wdrwscsvc.da to <SYSTEM32>\wdrwscsvc.exe
- from %ProgramFiles%\WinScare\winscrb.da to %ProgramFiles%\WinScare\winscrb.dll
- from %ProgramFiles%\WinScare\winscrs.da to %ProgramFiles%\WinScare\winscrs.dll
- from <SYSTEM32>\svcscrwin.da to <SYSTEM32>\svcscrwin.da.exe
- from <SYSTEM32>\svcscrwin.da to <SYSTEM32>\svcscrwin.exe
- from <SYSTEM32>\wdrwscsvc.da to <SYSTEM32>\wdrwscsvc.da.exe