Техническая информация
- '%WINDIR%\syswow64\rundll32.exe' C:\Users\Public\Documents\LcMXEd.txt,DllRegisterServer
- <SYSTEM32>\csrss.exe
- C:\users\public\documents\lcmxed.txt
- %ProgramFiles%\UNP\Logs\UpdateNotificationPipeline.001.etl
- 'fo###uropa.ro':443
- DNS ASK fo###uropa.ro
- DNS ASK ar#.msn.com
- DNS ASK im##########-rt-microsoft-com.akamaized.net
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- '<SYSTEM32>\devicecensus.exe' UserCxt
- '<SYSTEM32>\svchost.exe' -k netsvcs -p