Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{88830680-75F1-3ABD-2F09-8CE79BC5855F}] 'StubPath' = '<SYSTEM32>:dec.exe'
- %TEMP%\svchost.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:dec.exe
- %TEMP%\svchost.exe
- %TEMP%\svchost.exe