Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'AppleMobile64' = 'rundll32.exe "<LS_APPDATA>\SmartEventMusic\AppleMobile64.dll",SyncWISnap WdMobileVdm'
- <SYSTEM32>\rundll32.exe "<LS_APPDATA>\SmartEventMusic\AppleMobile64.dll",SyncWISnap WdMobileVdm
- <SYSTEM32>\rundll32.exe ""%TEMP%\isamapman.dll"", SyncWISnap DfrgobjPort
- <LS_APPDATA>\SmartEventMusic\AppleMobile64.dll
- %TEMP%\isamapman.dll
- %TEMP%\isamapman.dll
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'MSNNetUI' WindowName: ''