Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\87XCGP9RI0O0U00Q0W00S0Y00U0A08E888G89] 'ImagePath' = '%TEMP%\87XCGP9RI0O0U00Q0W00S0Y00U0A08E888G89.dat'
- %TEMP%\87XCGP9RI0O0U00Q0W00S0Y00U0A08E888G89.dat
- %TEMP%\87XCGP9RI0O0U00Q0W00S0Y00U0A08E888G89.dat
- '<SYSTEM32>\cmd.exe' /c sc config "UxSms" start= demand
- '<SYSTEM32>\sc.exe' config "UxSms" start= demand