Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SpookService] 'Start' = '00000002'
- '<SYSTEM32>\SpookServer.exe'
- '<SYSTEM32>\cmd.exe' /c %TEMP%\Deleteme.bat
- %WINDIR%\Help\spookexe69.log
- %WINDIR%\Help\YHBEXE69.CHI
- <SYSTEM32>\SpookServer.exe
- %TEMP%\Deleteme.bat
- 'localhost':5678