Техническая информация
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\windows\CurrentVersion\Run] 'NgcSvca' = '"%CommonProgramFiles%\Microsoft Shared\MSINFO\NgcSvca.exe"'
- %CommonProgramFiles%\microsoft shared\msinfo\ngcsvca.exe
- %CommonProgramFiles%\microsoft shared\msinfo\ngcsvca.bat
- %CommonProgramFiles%\microsoft shared\msinfo\ngcsvca.exe
- '42.##.28.235':5667
- ClassName: 'MS_WINHELP' WindowName: ''
- '%CommonProgramFiles%\microsoft shared\msinfo\ngcsvca.exe'
- '%CommonProgramFiles%\microsoft shared\msinfo\ngcsvca.exe' ' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles%\Microsoft Shared\MSINFO\NgcSvca.bat""' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles%\Microsoft Shared\MSINFO\NgcSvca.bat""