Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WinUserdll32' = 'rundll32.exe "<LS_APPDATA>\nscfgusb\WinUserdll32.dll",Bthcrtpnp ieAuthenticationsvc'
- <SYSTEM32>\rundll32.exe "<LS_APPDATA>\nscfgusb\WinUserdll32.dll",Bthcrtpnp ieAuthenticationsvc
- <SYSTEM32>\rundll32.exe ""%TEMP%\SecurityGL80.dll"", Bthcrtpnp uniEventOffice
- <LS_APPDATA>\nscfgusb\WinUserdll32.dll
- %TEMP%\SecurityGL80.dll
- %TEMP%\SecurityGL80.dll
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Asyncmapnt5' WindowName: ''