Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'AsyncEventxx' = 'rundll32.exe "<LS_APPDATA>\AppleapiPlay\AsyncEventxx.dll",AppleWebSched CatDBAuthenticationCtrl'
- <SYSTEM32>\rundll32.exe "<LS_APPDATA>\AppleapiPlay\AsyncEventxx.dll",AppleWebSched CatDBAuthenticationCtrl
- <SYSTEM32>\rundll32.exe ""%TEMP%\eapcrtServices.dll"", AppleWebSched odbcEventCres
- <LS_APPDATA>\AppleapiPlay\AsyncEventxx.dll
- %TEMP%\eapcrtServices.dll
- %TEMP%\eapcrtServices.dll
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Securityobjlink' WindowName: ''