Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '{EDFF96B3-5333-47AE-8DE6-022BB460FD36}' = '%WINDIR%\CppServer.exe'
- '<SYSTEM32>\svchost.exe' -k UserService
- <SYSTEM32>\svchost.exe
- %WINDIR%\CppServer.exe
- %WINDIR%\CppServer.exe