Техническая информация
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'CriticalUpdate' = '<SYSTEM32>\wucrtupd.exe -startup'
- %WINDIR%\tasks\powiadamianie o waznych aktualizacjach systemu windows.job
- <SYSTEM32>\tasks\powiadamianie o waznych aktualizacjach systemu windows
- %TEMP%\ixp000.tmp\wucrtupd.exe
- %TEMP%\ixp000.tmp\wucrtupd.inf
- %TEMP%\ixp000.tmp\advpack.dll
- %TEMP%\ixp000.tmp\w95inf32.dll
- %TEMP%\ixp000.tmp\w95inf16.dll
- %WINDIR%\syswow64\set50.tmp
- %WINDIR%\inf\set60.tmp
- %TEMP%\ixp000.tmp\w95inf16.dll
- %TEMP%\ixp000.tmp\w95inf32.dll
- %TEMP%\ixp000.tmp\advpack.dll
- %TEMP%\ixp000.tmp\wucrtupd.inf
- %TEMP%\ixp000.tmp\wucrtupd.exe
- %WINDIR%\syswow64\set50.tmp в %WINDIR%\syswow64\wucrtupd.exe
- %WINDIR%\inf\set60.tmp в %WINDIR%\inf\wucrtupd.inf
- '%TEMP%\ixp000.tmp\wucrtupd.exe' -terminate
- '%WINDIR%\syswow64\wucrtupd.exe' -install
- '%TEMP%\ixp000.tmp\wucrtupd.exe' -terminate' (со скрытым окном)