Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'userMapsvc' = 'rundll32.exe "<LS_APPDATA>\nsComms64\userMapsvc.dll",usbobjmon rasnetserv'
- <SYSTEM32>\rundll32.exe "<LS_APPDATA>\nsComms64\userMapsvc.dll",usbobjmon rasnetserv
- <SYSTEM32>\rundll32.exe "%TEMP%\AcrocfgRpl.dll", usbobjmon Cvtapidrv
- <LS_APPDATA>\nsComms64\userMapsvc.dll
- %TEMP%\nsu2.tmp
- %TEMP%\AcrocfgRpl.dll
- %TEMP%\AcrocfgRpl.dll
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Wdapilink' WindowName: ''