Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Pegasus] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Pegasus] 'ImagePath' = 'system32\svchost.exe -k rpcsvcs'
- <SYSTEM32>\svchost.exe -k rpcsvcs
- <SYSTEM32>\taskkill.exe /im 360tray.exe /f
- %TEMP%\WERe7b3.dir00\appcompat.txt
- %TEMP%\WERe7b3.dir00\manifest.txt
- %TEMP%\WERe7b3.dir00\svchost.exe.hdmp
- <SYSTEM32>\mpeg4c32.dll
- %TEMP%\WERe7b3.dir00\svchost.exe.mdmp
- <SYSTEM32>\mpeg4c32.dll
- ClassName: '' WindowName: ''