Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3PMmUpdate' = 'rundll32 "%WINDIR%\Update.dll",Main'
- <SYSTEM32>\cmd.exe /c "%TEMP%\\KB20122.bat"
- <SYSTEM32>\rundll32.exe "%WINDIR%\Update.dll",Main
- %TEMP%\KB20122.bat
- %WINDIR%\Update.dll