Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wmiCommsSupport' = 'rundll32.exe "<LS_APPDATA>\SmartPathmon\wmiCommsSupport.dll",uniGLMgmt DirectWImon2'
- <SYSTEM32>\rundll32.exe "<LS_APPDATA>\SmartPathmon\wmiCommsSupport.dll",uniGLMgmt DirectWImon2
- <SYSTEM32>\rundll32.exe "%TEMP%\AcroMapHelper.dll", uniGLMgmt uniPathARM
- <LS_APPDATA>\SmartPathmon\wmiCommsSupport.dll
- %TEMP%\AcroMapHelper.dll
- %TEMP%\AcroMapHelper.dll
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'fxPathLite' WindowName: ''