Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft svchost' = 'C:\_svchost.exe'
- ClassName: 'Regmonclass', WindowName: ''
- ClassName: 'Filemonclass', WindowName: ''
- C:\_svchost.exe
- C:\_svchost.exe
- ClassName: '4823-00000029' WindowName: ''
- ClassName: '18467-41' WindowName: ''