Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'servis' = '<DRIVERS>\servis.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'servi' = '<DRIVERS>\servi.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'GbpSbk' = '%PROGRAM_FILES%\GbPlugin\\GbpSbk.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Gsbpk' = '%PROGRAM_FILES%\GbPlugin\\Gsbpk.exe'
- '<SYSTEM32>\taskkill.exe' /im gbpsv.exe
- <DRIVERS>\servis.exe
- <DRIVERS>\servi.exe
- %TEMP%\aut1.tmp
- %TEMP%\nytfsnv
- %TEMP%\nytfsnv
- %TEMP%\aut1.tmp
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'