Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'RSA-1998166001' = '<SYSTEM32>\rundll32.exe "%APPDATA%\Microsoft\Crypto\RSA\-1998166001.dll",DllInitialize'
- %WINDIR%\Explorer.EXE
- ClassName: 'Indicator' WindowName: '(null)'