Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\Windows Management Service] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Windows Management Service] 'ImagePath' = '<SYSTEM32>\dmppi.exe -srv'
- %WINDIR%\explorer.exe
- %WINDIR%\explorer.exe
- <SYSTEM32>\dmppi.exe
- '%WINDIR%\explorer.exe'