Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ntmssvc] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\expand.exe' %TEMP%\\153843_tmp.tmp <SYSTEM32>\xpr132.dll
- <SYSTEM32>\xpr132.dll
- %TEMP%\153843_tmp.tmp
- <SYSTEM32>\xpr132.dll