Техническая информация
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] '123' = '%WINDIR%\Help\StormUpdate.exe'
- %WINDIR%\help\stormupdate.dll
- %WINDIR%\help\stormupdate.exe
- DNS ASK 16#.com
- DNS ASK t.##wl.com
- '%WINDIR%\help\stormupdate.exe'