Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\wscsvc] 'Start' = '00000002'
- <SYSTEM32>\cmd.exe /c ""%TEMP%\_define.bat" "
- <SYSTEM32>\MSWINSCK.REC
- <SYSTEM32>\wcssvc.dll
- %TEMP%\_define.bat
- %TEMP%\wcssvc.dll
- %TEMP%\00019A56
- %TEMP%\00024495
- %TEMP%\MSWINSCK.REC
- %TEMP%\wcssvc.dll
- %TEMP%\MSWINSCK.REC
- %TEMP%\00024495