Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Local Host Manager' = '<LS_APPDATA>\Local Host Manаger\сsrss.exe'
- %TEMP%\1D50E.dmp
- %TEMP%\dw.log
- <LS_APPDATA>\Local Host Manаger\сsrss.exe
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 364
- '<SYSTEM32>\cmd.exe' /c type nul > "<LS_APPDATA>\Local Host Manаger\сsrss.exe:Zone.Identifier"