Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nwsapagent\Parameters] 'ServiceDll' = '<SYSTEM32>\dlnmyvwntahgyunb.dln'
- [<HKLM>\SYSTEM\ControlSet001\Services\Nwsapagent] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- [<HKLM>\SYSTEM\ControlSet001\Services\Nwsapagent] 'Start' = '00000002'
- <SYSTEM32>\dlnmyvwntahgyunb.dln
- 'up####.#icrosoftshell.com':80
- DNS ASK up####.#icrosoftshell.com