Техническая информация
- '<SYSTEM32>\net.exe' stop Spooler
- %TEMP%\~nsu.tmp\Au_.exe
- %TEMP%\nsh3.tmp\nsExec.dll
- %TEMP%\nsh3.tmp\ns4.tmp
- %TEMP%\nsh3.tmp\ns5.tmp
- %TEMP%\nsh3.tmp\ns4.tmp
- '%TEMP%\~nsu.tmp\Au_.exe' _?=<Текущая директория>\
- '%TEMP%\nsh3.tmp\ns4.tmp' net stop Spooler
- '%TEMP%\nsh3.tmp\ns5.tmp' net start Spooler
- '<SYSTEM32>\net1.exe' stop Spooler
- '<SYSTEM32>\net.exe' start Spooler
- '<SYSTEM32>\net1.exe' start Spooler
- '<SYSTEM32>\spoolsv.exe'