Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Rstuvw Yabcdefg Ijk] 'Start' = '00000002'
- '%WINDIR%\WinAutoUpdate.com' Win7
- '%WINDIR%\WinAutoUpdate.com'
- '<SYSTEM32>\wermgr.exe' "-queuereporting_svc" "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_WinAutoUpdate.co_f7b446d086f3b86233c84c9d7f1c06aa673dfc_cab_062fab6b"
- '<SYSTEM32>\WScript.exe' "C:\1164.vbs"
- C:\1164.vbs
- %WINDIR%\WinAutoUpdate.com
- C:\1164.vbs
- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_WinAutoUpdate.co_f7b446d086f3b86233c84c9d7f1c06aa673dfc_cab_062fab6b\Report.wer.tmp в C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_WinAutoUpdate.co_f7b446d086f3b86233c84c9d7f1c06aa673dfc_cab_062fab6b\Report.wer
- '11#.#3.172.86':2014