Техническая информация
- '%PROGRAM_FILES%\AAV\K200.exe'
- '<SYSTEM32>\sc.exe' config MpsSvc start= disabled
- '<SYSTEM32>\net1.exe' stop MpsSvc
- '<SYSTEM32>\net1.exe' stop WinDefend
- '<SYSTEM32>\sc.exe' config WinDefend start= disabled
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\xjrxv.dll Exbcute
- '<SYSTEM32>\net.exe' stop WinDefend
- '<SYSTEM32>\net.exe' stop MpsSvc
- %PROGRAM_FILES%\AAV\K200.exe
- %PROGRAM_FILES%\AAV\CDriver.sys
- <SYSTEM32>\xjrxv.dll