Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Spooler] 'Start' = '00000002'
- <SYSTEM32>\spoolsv.exe
- <SYSTEM32>\cscript.exe ""%TEMP%\temp.vbs""
- %TEMP%\print32.dll
- %CommonProgramFiles%\odbc.nls
- %TEMP%\temp.vbs
- <Текущая директория>\Taniltsuulga-.doc
- %TEMP%\svchost.exe
- %TEMP%\print32.dll
- %TEMP%\temp.vbs
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'WordPadClass' WindowName: ''