Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Office Source] 'Start' = '00000002'
- '%PROGRAM_FILES%\Microsoft Office\Templates\office.exe'
- '<SYSTEM32>\cmd.exe' /c %TEMP%\5020.bat
- %TEMP%\5020.bat
- %PROGRAM_FILES%\Microsoft Office\Templates\office.exe
- %TEMP%\52769.tmp
- %PROGRAM_FILES%\Microsoft Office\Templates\office.exe
- DNS ASK 61###.rhelper.com