Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CdCommsAgent' = 'rundll32.exe "<LS_APPDATA>\advUserUsb\CdCommsAgent.dll",i18cfgdll32 tapicrt32'
- <SYSTEM32>\rundll32.exe "<LS_APPDATA>\advUserUsb\CdCommsAgent.dll",i18cfgdll32 tapicrt32
- <SYSTEM32>\rundll32.exe ""%TEMP%\dbAuthenticationppm.dll"", i18cfgdll32 CatDBAuthentication90
- <LS_APPDATA>\advUserUsb\CdCommsAgent.dll
- %TEMP%\dbAuthenticationppm.dll
- %TEMP%\dbAuthenticationppm.dll
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'AppapiInterval' WindowName: ''