Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'MsTcsWz' = 'Cmd.exe /c Start Rundll32.exe "%CommonProgramFiles%\System\MsTcaWz.dll",RunForRundll32'
- <SYSTEM32>\rundll32.exe "%CommonProgramFiles%\System\MsTcaWz.dll",RunForRundll32
- %CommonProgramFiles%\System\MsTcaWz.dll