Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Windows WER' = '<LS_APPDATA>\Microsoft\Windows\WER\ERC\{2180a8c4-d49657803cca}\csrss.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft CSX Loader' = '%TEMP%\{2180a8c4-csx-script-ru-d49657803cca}\csrss.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft CSX Libary' = '%TEMP%\{2180a8c4-csx-script-ru-d49657803cca}\csrss.exe'
- %TEMP%\{2180a8c4-csx-script-ru-d49657803cca}\csrss.exe
- %TEMP%\{2180a8c4-csx-script-ru-d49657803cca}\csrss.exe
- ClassName: 'Indicator' WindowName: '(null)'