Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WorkAssist' = '"%APPDATA%\spoolsv.exe"'
- '%APPDATA%\spoolsv.exe'
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe'
- eqnedt32.exe
- %TEMP%\8.t
- %APPDATA%\vsodscpl.dll
- %APPDATA%\vsodscpl
- %APPDATA%\spoolsv.exe
- %TEMP%\8.t
- '12#.#99.154.189':443
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding