Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\kungsfqtltmoyx] 'start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\wtxvbvgnwhxbvfqj] 'start' = '00000001'
- %TEMP%\msupdte.exe
- %TEMP%\arsci43a.exe
- <SYSTEM32>\spoolsv.exe
- %TEMP%\mbpxuwoopt.tmp
- <DRIVERS>\wtxvbvgnwhxbvfqj.sys
- <DRIVERS>\kungsfjkndbtpo.sys
- %TEMP%\iqombcrpvn.tmp
- %TEMP%\msupdte.exe
- %TEMP%\arsci43a.exe
- %TEMP%\erifulvx.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''