Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\dkppeu\Parameters] 'ServiceDll' = '<SYSTEM32>\dkppeu.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\dkppeu] 'ImagePath' = '<SYSTEM32>\svchost.exe -k dkppeu'
- [<HKLM>\SYSTEM\ControlSet001\Services\dkppeu] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k dkppeu
- '<SYSTEM32>\mmc.exe'
- '<SYSTEM32>\rundll32.exe' "%TEMP%\dkppeu.dll",ServiceMain
- <SYSTEM32>\dkppeu.dll
- %TEMP%\RCX1.tmp
- %TEMP%\dkppeu.dll
- %TEMP%\dkppeu.dll
- %TEMP%\dkppeu.dll
- 'bb#.###bler-news.com':12559
- DNS ASK bb#.###bler-news.com
- ClassName: 'MS_WINHELP' WindowName: ''