Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\V2Z8H] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\V2Z8H] 'ImagePath' = '%WINDIR%\TEMP\V2Z8H.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\AppMgmt] 'ImagePath' = '<SYSTEM32>\rundll32.exe jqsbsvm1.3.dll,k1'
- [<HKLM>\SYSTEM\ControlSet001\Services\AppMgmt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\AppMgmt] 'ImagePath' = '<SYSTEM32>\rundll32.exe WIN32TXB2.dll,k1'
- '<SYSTEM32>\rundll32.exe' jqsbsvm1.3.dll,k1
- '<SYSTEM32>\rundll32.exe' jqsbsvm1.3.dll,eqtaaa
- '<SYSTEM32>\rundll32.exe' WIN32TXB2.dll,k1
- '<SYSTEM32>\rundll32.exe' WIN32TXB2.dll,eqtaaa
- %WINDIR%\Temp\V2Z8H.sys
- <SYSTEM32>\jqsbsvm1.3.dll
- <SYSTEM32>\win32txb2.dll
- %WINDIR%\Temp\V2Z8H.sys
- <SYSTEM32>\win32txb2.dll