Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Help_Internet] 'Start' = '00000002'
- <SYSTEM32>\cmd.exe /c C:\DelEx.bat
- <SYSTEM32>\svchost.exe -k netsvcs
- <SYSTEM32>\rundll32.exe "%TEMP%\SetupExTest.dll",Install
- C:\DelEx.bat
- <SYSTEM32>\helpexpt.dll
- %TEMP%\SetupExTest.dll
- <SYSTEM32>\helpexpt.dll
- %TEMP%\SetupExTest.dll
- 'll###cxzdsf.com':443
- DNS ASK ll###cxzdsf.com