Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WdHelpapi' = 'rundll32.exe "<LS_APPDATA>\CRLmapNetM\WdHelpapi.dll",SystemMainHelper BthWebusb'
- <SYSTEM32>\rundll32.exe "<LS_APPDATA>\CRLmapNetM\WdHelpapi.dll",SystemMainHelper BthWebusb
- <SYSTEM32>\rundll32.exe "%TEMP%\QuickNetaudio.dll", SystemMainHelper uniMapclass
- <LS_APPDATA>\CRLmapNetM\WdHelpapi.dll
- %TEMP%\nse2.tmp
- %TEMP%\QuickNetaudio.dll
- %TEMP%\QuickNetaudio.dll
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'AsyncCommslog' WindowName: ''